1 matches found
GHSA-8PV9-QH96-9HC6 Jenkins does not perform a permission check in an HTTP endpoint
Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to access other users' "My Views". Attackers with global View/Configure and View/Delete permissions are also able to change other users' "...
5.4CVSS5.9AI score0.04263EPSS
SaveExploits0References6
20