Veille CVE

Recherche « Jenkins Project Jenkins Pipeline: Build Step Plugin »

2 CVE

  1. CVE-2026-84661 5.4 Moyenne

    Jenkins Project Jenkins Pipeline: Build Step Plugin

    A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAbort` parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.

  2. CVE-2026-84660 5.4 Moyenne

    Jenkins Project Jenkins Pipeline: Build Step Plugin

    A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.