1. Home
  2. Vulnerabilities
  3. CVE-2017-1000084

CVE-2017-1000084

CVSS v3.0 6.5 (Medium)
65% Progress
CVSS v2.0 4 (Medium)
40% Progress
EPSS 0.05 % (22th)
0.05% Progress
Affected Products 1
Advisories 1
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software Graph Web & Social Timeline

Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.

Weaknesses
CWE-276
Incorrect Default Permissions
CVE Status
PUBLISHED
CNA
MITRE
Published Date
2017-10-05 01:29:03
(7 years ago)
Updated Date
2019-10-03 00:03:26
(5 years ago)

Affected Products

Jenkins

Configuration #1

    CPE23 From Up To
  Jenkins Parameterized Trigger 1.0 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.0:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.1 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.1:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.2 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.2:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.3 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.3:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.4 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.4:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.5 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.5:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 1.6 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:1.6:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.0 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.0:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.1 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.1:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.2 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.2:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.3 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.3:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.4 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.4:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.5 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.5:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.6 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.6:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.7 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.7:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.8 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.8:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.9 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.9:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.10 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.10:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.11 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.11:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.12 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.12:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.13 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.13:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.14 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.14:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.15 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.15:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.16 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.16:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.17 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.17:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.18 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.18:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.19 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.19:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.20 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.20:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.21 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.21:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.22 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.22:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.23 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.23:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.24 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.24:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.25 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.25:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.26 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.26:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.27 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.27:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.28 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.28:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.29 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.29:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.30 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.30:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.31 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.31:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.32 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.32:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.33 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.33:*:*:*:*:jenkins
  Jenkins Parameterized Trigger 2.34 for Jenkins cpe:2.3:a:jenkins:parameterized_trigger:2.34:*:*:*:*:jenkins