{"id":"CVE-2023-28668","details":"Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.","aliases":["GHSA-436g-2f92-cvhh"],"modified":"2026-07-09T15:01:05.698260Z","published":"2023-04-02T21:15:08.767Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2023-03-21/#SECURITY-3053"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/role-strategy-plugin","events":[{"introduced":"0"},{"last_affected":"2872c41fae5151b4a032d90cb4bbb380cc5156cb"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:role-based_authorization_strategy:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"587.v2872c41fa_e51"}],"source":"CPE_RANGE"}}],"versions":["587.v2872c41fa_e51","584.vf8e515397ecd","575.v4d286a_03e6d7","569.v7476f8e4fe29","562.v44e9a_e828d0e","561.v9846c7351a_41","555.v8d194cc85b_30","552.v14cb_85499b_89","548.vb_60076577ec7","546.ve16648865996","530.ved5445d4875a_","526.v859673312a_14","521.vcf7a_3a_8dde42","510.v909834359ec2","508.v2a_f05b_05e9d8","506.v13f908ee1fc9","501.v88fe53d65c80","488.v0634ce149b_8c","484.v8a_a_e4b_d785fd","483.v17281966f5c3","role-strategy-3.2.0","role-strategy-3.1","role-strategy-3.0","role-strategy-2.16","role-strategy-2.15","role-strategy-2.14","role-strategy-2.13","role-strategy-2.12","role-strategy-2.11","role-strategy-2.10","role-strategy-2.9.0","role-strategy-2.8.2","role-strategy-2.8.1","role-strategy-2.8.0","role-strategy-2.7.0","role-strategy-2.6.1","role-strategy-2.6.0","role-strategy-2.5.1","role-strategy-2.5.0","role-strategy-2.4.0","role-strategy-2.3.2","role-strategy-2.3.1","role-strategy-2.3.0","role-strategy-2.2.0","role-strategy-2.1.0","role-strategy-1.1.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-28668.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}