CVE-2018-1000015

On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `node` blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes plugin 2.17 and earlier.
Severity
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
HIGH
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
VendorProductVersion
jenkinspipeline_nodes_and_processes
𝑥
≤ 2.17
𝑥
= Vulnerable software versions