CVE-2017-1000084

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-1000084
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000084.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-1000084
Aliases
Published
2017-10-05T01:29:03Z
Modified
2024-09-03T01:33:05.527198Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

References

Affected packages

Git / github.com/jenkinsci/parameterized-trigger-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/parameterized-trigger-plugin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1a7e0e23227900f8fa68acb01c0ef2715c2d664b
Last affected
1f058e6927fed36f6d87b73b6491cd2975bd30ae
Last affected
3279fa3135e025b01ab70cee4933b6c566c73b74
Last affected
3373f317f9216f7374ee8fb99cf937d09ec7bdd9
Last affected
3cb83553839ca8c622aefd2839e942f1d9148adb
Last affected
4793acf42da47844da5bec8f6ab0883876bbd71e
Last affected
486561075e8f9ca72f0423c812f5c810a03b7a27
Last affected
49ebff43fc1c5611062707f44c91e1b93db18b29
Last affected
4c4dc61312bd735f278225cde3b360a53ebdfd12
Last affected
4f0376fa64379e160c51f895b19d22c92754aed9
Last affected
51c356a0b22a0f29ee07653d54cffaa59226ffbb
Last affected
525f2664125bbdd66ff0ab7cc8eb345dff9f9fc1
Last affected
52f3b2a6cfb80b21765861c4a957c2ae14cee17e
Last affected
59cdb166ca21d7215cd7e35426995c32e4a7a810
Last affected
5b898d4eac4ad2f8557b271380583cc0acda45af
Last affected
614f70b22674e586c52f34c41ce0469c9f586768
Last affected
61951110409dbf2d761b9825368f3ba0b9432fd8
Last affected
6cdc54de5e2ade064c39110909dd955c921f90ee
Last affected
6f969681f0d9d696a4bb86f3b318d7e5df5632e7
Last affected
8d46bd401ab331a00f30fe3bcc03a9a9eadff720
Last affected
9fc1b795b35541219b620e06f45a2d0b4512e4eb
Last affected
a13002e7a6de227f222ab41c1a951a87bbe6d6e3
Last affected
a2ca09f3334d79822a2b60bf9e5c310f26e6c79d
Last affected
ab2740f2e16d7e39f341ac719f67ac18265f506b
Last affected
af07f88891491635cacdb2bc61ae7450a5c3c6e3
Last affected
b3470152a147e84b0ecebaa5b25081772c4b51a3
Last affected
c47fcb783485f08d16426fc184716b5d1fd9622a
Last affected
c774497accd0820bc8e2a0af41f10bb19e0bffee
Last affected
c917964d3b671ebbf7870d0fa52780290b94d613
Last affected
cc2fe5c77c1084a558d66df209c533b12c346f40
Last affected
d551d3146364f4dd83bbea4af3109149c5942d52
Last affected
d575dfe528de386712bb922f679fa590ddf0aa4e
Last affected
dff2e74dcf2df2f8c8c931e0baaa2b37ba232e01
Last affected
e0b59a8c9c21686fe49a0f16a41399112062056c
Last affected
e18833a3df3469d3426858520f00f2a2082100e8
Last affected
e1c48ee1415a765d06938af5dd4c94af030864a9
Last affected
f0555a14fdb2aff68de770d30c922bc0c15bb841
Last affected
f330b7d3e5d62af77b0b25d98bcd4fd3c71213ad
Last affected
fa6392bedc45f3a80c1aaee2dedca8bffeb5ee1c
Last affected
fe1c7e7d429c694501bf2a94d094552f2793d6f0
Last affected
fe8f62291cd168ae70b6def38233a0b4098814f3
Last affected
ff185402639c8629aeba7cdd8d29246d35c439b6

Affected versions

parameterized-trigger-2.*

parameterized-trigger-2.10
parameterized-trigger-2.11
parameterized-trigger-2.12
parameterized-trigger-2.13
parameterized-trigger-2.14
parameterized-trigger-2.15
parameterized-trigger-2.16
parameterized-trigger-2.17
parameterized-trigger-2.18
parameterized-trigger-2.19
parameterized-trigger-2.20
parameterized-trigger-2.5
parameterized-trigger-2.6
parameterized-trigger-2.7
parameterized-trigger-2.8
parameterized-trigger-2.9