jenkins_role_based_authorization_strategy

unspecified

OTHER 2 CVEs

2.12

MAJOR_MINOR 1 CVE

3.0

MAJOR_MINOR 1 CVE

3.1

MAJOR_MINOR 1 CVE

587.v2872c41fa_e51

OTHER 1 CVE

0

SINGLE_NUMBER 1 CVE

CVE-2023-28668

Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.

UNKNOWN Mar 23, 2023

CVE-2021-21624

An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

UNKNOWN Mar 18, 2021

CVE-2020-2286

Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.

UNKNOWN Oct 08, 2020