CVE-2023-33004

Summary

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.

Affected Software

VendorProductVersion RangeStatus
Jenkins ProjectJenkins Tag Profiler Plugin0 <= 0.2affected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References