CVE-2023-41945
Assigner: jenkins
Published: 2023-09-06T12:09:02.231Z
State: PUBLISHED
affected: defaultStatus: unknown
product: Jenkins Assembla Auth Plugin
vendor: Jenkins Project
versions: lessThanOrEqual: 1.14
status: affected
version: 0
versionType: maven
descriptions: value: Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.