Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs.
References
Link | Resource |
---|---|
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2061 | Vendor Advisory |
Configurations
Information
Published : 2022-06-30 11:15
Updated : 2022-07-08 11:49
NVD link : CVE-2022-34818
Mitre link : CVE-2022-34818
JSON object : View
CWE
CWE-862
Missing Authorization
Products Affected
jenkins
- failed_job_deactivator