Lucene search
+L

1 matches found

OSV
OSV
added 2024/08/07 3:30 p.m.17 views

GHSA-8PV9-QH96-9HC6 Jenkins does not perform a permission check in an HTTP endpoint

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to access other users' "My Views". Attackers with global View/Configure and View/Delete permissions are also able to change other users' "...

5.4CVSS5.9AI score0.04263EPSS
SaveExploits0References6
Rows per page
Query Builder