GHSA-4gh2-m88h-8cj8HighCVSS 8.8

Disabled permissions can be granted by Jenkins SSH2 Easy Plugin

Published
September 6, 2023
Last Modified
January 30, 2024

🔗 CVE IDs covered (1)

CVE-2023-41939 →

📋 Description

Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:ssh2easy:< 1.6

🔗 References (4)