Missing Authorization in Jenkins plug-in for ServiceNow DevOps

CVE-2023-3442

What is CVE-2023-3442?

A vulnerability related to missing authorization has been identified in the Jenkins Plug-in for ServiceNow DevOps, impacting all versions prior to 1.38.1. This vulnerability may allow attackers to gain unauthorized access to sensitive information within the system if exploited successfully. It is recommended to upgrade to version 1.38.1 to mitigate this risk, while no changes are necessary on existing instances of the Now Platform.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References