CVE-2017-1000084

EUVD-2022-4539
Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 11%
Affected Products (NVD)
VendorProductVersion
jenkinsparameterized_trigger
1.0
jenkinsparameterized_trigger
1.1
jenkinsparameterized_trigger
1.2
jenkinsparameterized_trigger
1.3
jenkinsparameterized_trigger
1.4
jenkinsparameterized_trigger
1.5
jenkinsparameterized_trigger
1.6
jenkinsparameterized_trigger
2.0
jenkinsparameterized_trigger
2.1
jenkinsparameterized_trigger
2.2
jenkinsparameterized_trigger
2.3
jenkinsparameterized_trigger
2.4
jenkinsparameterized_trigger
2.5
jenkinsparameterized_trigger
2.6
jenkinsparameterized_trigger
2.7
jenkinsparameterized_trigger
2.8
jenkinsparameterized_trigger
2.9
jenkinsparameterized_trigger
2.10
jenkinsparameterized_trigger
2.11
jenkinsparameterized_trigger
2.12
jenkinsparameterized_trigger
2.13
jenkinsparameterized_trigger
2.14
jenkinsparameterized_trigger
2.15
jenkinsparameterized_trigger
2.16
jenkinsparameterized_trigger
2.17
jenkinsparameterized_trigger
2.18
jenkinsparameterized_trigger
2.19
jenkinsparameterized_trigger
2.20
jenkinsparameterized_trigger
2.21
jenkinsparameterized_trigger
2.22
jenkinsparameterized_trigger
2.23
jenkinsparameterized_trigger
2.24
jenkinsparameterized_trigger
2.25
jenkinsparameterized_trigger
2.26
jenkinsparameterized_trigger
2.27
jenkinsparameterized_trigger
2.28
jenkinsparameterized_trigger
2.29
jenkinsparameterized_trigger
2.30
jenkinsparameterized_trigger
2.31
jenkinsparameterized_trigger
2.32
jenkinsparameterized_trigger
2.33
jenkinsparameterized_trigger
2.34
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://jenkins.io/security/advisory/2017-07-10/
https://jenkins.io/security/advisory/2017-07-10/