org.rundeck:rundeck@4.17.1-20231018 vulnerabilities
latest version
5.13.0-20250625
latest non vulnerable version
first published
7 years ago
latest version published
24 days ago
licenses detected
- [3.0.0-alpha1,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.rundeck:rundeck package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.rundeck:rundeck is an enable Self-Service Operations package which gives specific users access to your existing tools, services, and scripts. Affected versions of this package are vulnerable to Missing Authorization. Authenticated users could gain access to view or delete jobs, without the necessary authorization checks. How to fix Missing Authorization? Upgrade | [4.12.0,4.17.3) |
org.rundeck:rundeck is an enable Self-Service Operations package which gives specific users access to your existing tools, services, and scripts. Affected versions of this package are vulnerable to Missing Authorization. An authenticated attacker can acces the output of the endpoints, which is a list of job names and groups for any project, without the necessary authorization checks. Note: The output is read-only and the access does not allow changes to the information. How to fix Missing Authorization? Upgrade | [4.17.0,4.17.3) |