CloudBees Jenkins Multijob plugin security bypass vulnerability

CloudBees Jenkins is a Java-based continuous integration tool from CloudBees, Inc. that is used to monitor ongoing software releases/testing projects and timed tasks.Multijob is used as one of the options for defining complex and hierarchical job structures in Jenkins. A security bypass...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

Code injection

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

The CVE-2017-1000390 entry concerns the Jenkins Multijob plugin where versions up to 1.25 did not enforce permissions for the Resume Build action. This allowed anyone with Job/Read permission to resume a build, representing a security bypass of build control. Affected component: Jenkins Multijob ...