Back to search
CVE-2021-21623
Published: Mar 18, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.
| Vendor | Product | Versions |
|---|---|---|
Jenkins project | Jenkins Matrix Authorization Strategy Plugin | affected unspecified - <= 2.6.5unaffected 2.5.2unaffected 2.6.3.1 |
References
https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180
x_refsource_CONFIRM
[oss-security] 20210318 Multiple vulnerabilities in Jenkins plugins
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now