Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Maven package

org.jenkins-ci.plugins.workflow:workflow-durable-task-step

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 4.8MavenPublished

    Incorrect permission checks in Pipeline: Nodes and Processes plugin

    CVE-2018-1000015 · GHSA-9r7f-rqhw-j8h8

    Affected
    • Maven org.jenkins-ci.plugins.workflow:workflow-durable-task-step <= 2.17
    Fixed in
    2.18· Vendor fix available
    Issue
    On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline node blocks on those agents due to incorrect permissions checks in Pipeline: Nodes and Processes plugin 2.17 and earlier.

    Recommended action: Upgrade to 2.18 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →