{"id":"CVE-2017-1000084","details":"Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication it was running as and allowed triggering any other project in Jenkins.","aliases":["GHSA-mc22-25r3-2w9w"],"modified":"2026-07-08T12:42:07.773608Z","published":"2017-10-05T01:29:03.510Z","references":[{"type":"ADVISORY","url":"https://jenkins.io/security/advisory/2017-07-10/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/parameterized-trigger-plugin","events":[{"introduced":"525f2664125bbdd66ff0ab7cc8eb345dff9f9fc1"},{"last_affected":"3cb83553839ca8c622aefd2839e942f1d9148adb"}],"database_specific":{"cpe":["cpe:2.3:a:jenkins:parameterized_trigger:1.0:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.1:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.2:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.3:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.4:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.5:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:1.6:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.0:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.1:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.2:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.3:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.4:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.5:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.6:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.7:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.8:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.9:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.10:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.11:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.12:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.13:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.14:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.15:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.16:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.17:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.18:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.19:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.20:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.21:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.22:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.23:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.24:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.25:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.26:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.27:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.28:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.29:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.30:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.31:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.32:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.33:*:*:*:*:jenkins:*:*","cpe:2.3:a:jenkins:parameterized_trigger:2.34:*:*:*:*:jenkins:*:*"],"extracted_events":[{"introduced":"1.0"},{"last_affected":"1.0"},{"introduced":"1.1"},{"last_affected":"1.1"},{"introduced":"1.2"},{"last_affected":"1.2"},{"introduced":"1.3"},{"last_affected":"1.3"},{"introduced":"1.4"},{"last_affected":"1.4"},{"introduced":"1.5"},{"last_affected":"1.5"},{"introduced":"1.6"},{"last_affected":"1.6"},{"introduced":"2.0"},{"last_affected":"2.0"},{"introduced":"2.1"},{"last_affected":"2.1"},{"introduced":"2.2"},{"last_affected":"2.2"},{"introduced":"2.3"},{"last_affected":"2.3"},{"introduced":"2.4"},{"last_affected":"2.4"},{"introduced":"2.5"},{"last_affected":"2.5"},{"introduced":"2.6"},{"last_affected":"2.6"},{"introduced":"2.7"},{"last_affected":"2.7"},{"introduced":"2.8"},{"last_affected":"2.8"},{"introduced":"2.9"},{"last_affected":"2.9"},{"introduced":"2.10"},{"last_affected":"2.10"},{"introduced":"2.11"},{"last_affected":"2.11"},{"introduced":"2.12"},{"last_affected":"2.12"},{"introduced":"2.13"},{"last_affected":"2.13"},{"introduced":"2.14"},{"last_affected":"2.14"},{"introduced":"2.15"},{"last_affected":"2.15"},{"introduced":"2.16"},{"last_affected":"2.16"},{"introduced":"2.17"},{"last_affected":"2.17"},{"introduced":"2.18"},{"last_affected":"2.18"},{"introduced":"2.19"},{"last_affected":"2.19"},{"introduced":"2.20"},{"last_affected":"2.20"},{"introduced":"2.21"},{"last_affected":"2.21"},{"introduced":"2.22"},{"last_affected":"2.22"},{"introduced":"2.23"},{"last_affected":"2.23"},{"introduced":"2.24"},{"last_affected":"2.24"},{"introduced":"2.25"},{"last_affected":"2.25"},{"introduced":"2.26"},{"last_affected":"2.26"},{"introduced":"2.27"},{"last_affected":"2.27"},{"introduced":"2.28"},{"last_affected":"2.28"},{"introduced":"2.29"},{"last_affected":"2.29"},{"introduced":"2.30"},{"last_affected":"2.30"},{"introduced":"2.31"},{"last_affected":"2.31"},{"introduced":"2.32"},{"last_affected":"2.32"},{"introduced":"2.33"},{"last_affected":"2.33"},{"introduced":"2.34"},{"last_affected":"2.34"}],"source":"CPE_STRING"}}],"versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","2.0","2.1","2.10","2.11","2.12","2.13","2.14","2.15","2.16","2.17","2.18","2.19","2.2","2.20","2.21","2.22","2.23","2.24","2.25","2.26","2.27","2.28","2.29","2.3","2.30","2.31","2.32","2.33","2.34","2.4","2.5","2.6","2.7","2.8","2.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000084.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}]}