CVE-2023-28668
Published Apr 2, 2023Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.
Vendor/product archive
jenkins / role-based_authorization_strategy CVEs
Beta · best-effort4 CVEs tagged to jenkins / role-based_authorization_strategy — 1 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2021-21624
Published Mar 18, 2021An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even i…
CVE-2020-2286
Published Oct 8, 2020Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being…
CVE-2017-1000090
Published Oct 5, 2017Role-based Authorization Strategy Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attacke…
Showing 1-4 of 4 CVEsPage 1 of 1