{"id":"CVE-2017-1000089","published":"2017-10-04T01:00:00Z","modified":"2024-08-05T21:53:06Z","title":"Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact…","vendor":null,"product":null,"tier":"tail","description":{"text":"Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in Jenkins. The Pipeline: Build Step Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00958,"percentile":0.61234,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2017-07-10/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":12.2,"factors":[{"name":"EPSS percentile","points":12.25}]},"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:pipeline-build-step","vulnerableRanges":["<2.5.1"],"patched":["2.5.1"],"from":["GHSA-8jx9-7j5m-79x4"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3197","exploited":false,"provenance":"source"}}