org.rundeck:rundeck@4.14.1-rc2-20230621 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.rundeck:rundeck package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Missing Authorization

org.rundeck:rundeck is an enable Self-Service Operations package which gives specific users access to your existing tools, services, and scripts.

Affected versions of this package are vulnerable to Missing Authorization. Authenticated users could gain access to view or delete jobs, without the necessary authorization checks.

How to fix Missing Authorization?

Upgrade org.rundeck:rundeck to version 4.17.3 or higher.

[4.12.0,4.17.3)