Description

A data modification vulnerability exists in Jenkins Resource Disposer Plugin 0.11 and earlier in AsyncResourceDisposer.java that allows attackers to stop tracking a resource.

Remediation

References

https://jenkins.io/security/advisory/2018-07-30/#SECURITY-997

Related Vulnerabilities

CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk18on

CVE-2023-50771 Vulnerability in maven package org.jenkins-ci.plugins:oic-auth

CVE-2019-10308 Vulnerability in maven package org.jvnet.hudson.plugins:analysis-core

CVE-2018-7307 Vulnerability in maven package org.webjars.npm:auth0-js

CVE-2018-1000607 Vulnerability in maven package org.jenkins-ci.plugins:fortify-cloudscan-jenkins-plugin

Severity

Medium

Classification

CWE-20 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Vendor Advisory