CVE-2023-41939

Summary

CVE-2023-41939 is a vulnerability affecting the Jenkins SSH2 Easy Plugin version 1.4 and older. This issue permits users, who were previously granted optional permissions, to access functionality they no longer should have. The plugin fails to verify if the permissions enabled correspond to the configured permissions, leading to a potential security risk. Jenkins users are advised to update the plugin to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.