org.rundeck:rundeck@4.17.1-20231018 vulnerabilities
-
latest version
5.2.0-20240410
-
latest non vulnerable version
-
first published
6 years ago
-
latest version published
a month ago
-
licenses detected
- [3.0.0-alpha1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.rundeck:rundeck package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
org.rundeck:rundeck is an enable Self-Service Operations package which gives specific users access to your existing tools, services, and scripts. Affected versions of this package are vulnerable to Missing Authorization. Authenticated users could gain access to view or delete jobs, without the necessary authorization checks. How to fix Missing Authorization? Upgrade |
[4.12.0,4.17.3)
|
org.rundeck:rundeck is an enable Self-Service Operations package which gives specific users access to your existing tools, services, and scripts. Affected versions of this package are vulnerable to Missing Authorization. An authenticated attacker can acces the output of the endpoints, which is a list of job names and groups for any project, without the necessary authorization checks. Note: The output is read-only and the access does not allow changes to the information. How to fix Missing Authorization? Upgrade |
[4.17.0,4.17.3)
|