CVE-2018-1000114: Incorrect Authorization

March 13, 2018 (updated October 3, 2019)

An improper authorization vulnerability exists in the Jenkins Promoted Builds Plugin in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.

References

jenkins.io/security/advisory/2018-02-26/
nvd.nist.gov/vuln/detail/CVE-2018-1000114

Detect and mitigate CVE-2018-1000114 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →