CVE-2017-1000084

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-1000084

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000084.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-1000084

Aliases

GHSA-mc22-25r3-2w9w

Published

2017-10-05T01:29:03Z

Modified

2026-07-08T12:42:07Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

References

https://jenkins.io/security/advisory/2017-07-10/

Affected packages

Git / github.com/jenkinsci/parameterized-trigger-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/parameterized-trigger-plugin

Events

Introduced

525f2664125bbdd66ff0ab7cc8eb345dff9f9fc1

Last Affected

3cb83553839ca8c622aefd2839e942f1d9148adb

Database specific

Show details

{
    "cpe": [
        "cpe:2.3:a:jenkins:parameterized_trigger:1.0:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.1:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.2:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.3:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.4:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.5:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:1.6:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.0:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.1:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.2:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.3:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.4:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.5:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.6:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.7:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.8:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.9:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.10:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.11:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.12:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.13:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.14:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.15:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.16:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.17:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.18:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.19:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.20:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.21:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.22:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.23:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.24:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.25:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.26:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.27:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.28:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.29:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.30:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.31:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.32:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.33:*:*:*:*:jenkins:*:*",
        "cpe:2.3:a:jenkins:parameterized_trigger:2.34:*:*:*:*:jenkins:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "1.0"
        },
        {
            "last_affected": "1.0"
        },
        {
            "introduced": "1.1"
        },
        {
            "last_affected": "1.1"
        },
        {
            "introduced": "1.2"
        },
        {
            "last_affected": "1.2"
        },
        {
            "introduced": "1.3"
        },
        {
            "last_affected": "1.3"
        },
        {
            "introduced": "1.4"
        },
        {
            "last_affected": "1.4"
        },
        {
            "introduced": "1.5"
        },
        {
            "last_affected": "1.5"
        },
        {
            "introduced": "1.6"
        },
        {
            "last_affected": "1.6"
        },
        {
            "introduced": "2.0"
        },
        {
            "last_affected": "2.0"
        },
        {
            "introduced": "2.1"
        },
        {
            "last_affected": "2.1"
        },
        {
            "introduced": "2.2"
        },
        {
            "last_affected": "2.2"
        },
        {
            "introduced": "2.3"
        },
        {
            "last_affected": "2.3"
        },
        {
            "introduced": "2.4"
        },
        {
            "last_affected": "2.4"
        },
        {
            "introduced": "2.5"
        },
        {
            "last_affected": "2.5"
        },
        {
            "introduced": "2.6"
        },
        {
            "last_affected": "2.6"
        },
        {
            "introduced": "2.7"
        },
        {
            "last_affected": "2.7"
        },
        {
            "introduced": "2.8"
        },
        {
            "last_affected": "2.8"
        },
        {
            "introduced": "2.9"
        },
        {
            "last_affected": "2.9"
        },
        {
            "introduced": "2.10"
        },
        {
            "last_affected": "2.10"
        },
        {
            "introduced": "2.11"
        },
        {
            "last_affected": "2.11"
        },
        {
            "introduced": "2.12"
        },
        {
            "last_affected": "2.12"
        },
        {
            "introduced": "2.13"
        },
        {
            "last_affected": "2.13"
        },
        {
            "introduced": "2.14"
        },
        {
            "last_affected": "2.14"
        },
        {
            "introduced": "2.15"
        },
        {
            "last_affected": "2.15"
        },
        {
            "introduced": "2.16"
        },
        {
            "last_affected": "2.16"
        },
        {
            "introduced": "2.17"
        },
        {
            "last_affected": "2.17"
        },
        {
            "introduced": "2.18"
        },
        {
            "last_affected": "2.18"
        },
        {
            "introduced": "2.19"
        },
        {
            "last_affected": "2.19"
        },
        {
            "introduced": "2.20"
        },
        {
            "last_affected": "2.20"
        },
        {
            "introduced": "2.21"
        },
        {
            "last_affected": "2.21"
        },
        {
            "introduced": "2.22"
        },
        {
            "last_affected": "2.22"
        },
        {
            "introduced": "2.23"
        },
        {
            "last_affected": "2.23"
        },
        {
            "introduced": "2.24"
        },
        {
            "last_affected": "2.24"
        },
        {
            "introduced": "2.25"
        },
        {
            "last_affected": "2.25"
        },
        {
            "introduced": "2.26"
        },
        {
            "last_affected": "2.26"
        },
        {
            "introduced": "2.27"
        },
        {
            "last_affected": "2.27"
        },
        {
            "introduced": "2.28"
        },
        {
            "last_affected": "2.28"
        },
        {
            "introduced": "2.29"
        },
        {
            "last_affected": "2.29"
        },
        {
            "introduced": "2.30"
        },
        {
            "last_affected": "2.30"
        },
        {
            "introduced": "2.31"
        },
        {
            "last_affected": "2.31"
        },
        {
            "introduced": "2.32"
        },
        {
            "last_affected": "2.32"
        },
        {
            "introduced": "2.33"
        },
        {
            "last_affected": "2.33"
        },
        {
            "introduced": "2.34"
        },
        {
            "last_affected": "2.34"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

1.*

1.0

1.1

1.2

1.3

1.4

1.5

1.6

2.*

2.0

2.1

2.10

2.11

2.12

2.13

2.14

2.15

2.16

2.17

2.18

2.19

2.2

2.20

2.21

2.22

2.23

2.24

2.25

2.26

2.27

2.28

2.29

2.3

2.30

2.31

2.32

2.33

2.34

2.4

2.5

2.6

2.7

2.8

2.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000084.json"