Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they’re no longer entitled to.
[
{
"defaultStatus": "unaffected",
"product": "Jenkins SSH2 Easy Plugin",
"vendor": "Jenkins Project",
"versions": [
{
"lessThanOrEqual": "1.4",
"status": "affected",
"version": "0",
"versionType": "maven"
}
]
}
]