Jenkins Multijob plugin did not check permissions in the Resume Build action

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build. Multijob plugin 1.26 introduced a permission check requiring Overall/Administer. This was lowered to Job/Build in version 1.27...

CloudBees Jenkins Multijob plugin security bypass vulnerability

CloudBees Jenkins is a Java-based continuous integration tool from CloudBees, Inc. that is used to monitor ongoing software releases/testing projects and timed tasks.Multijob is used as one of the options for defining complex and hierarchical job structures in Jenkins. A security bypass...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

Code injection

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

The CVE-2017-1000390 entry concerns the Jenkins Multijob plugin where versions up to 1.25 did not enforce permissions for the Resume Build action. This allowed anyone with Job/Read permission to resume a build, representing a security bypass of build control. Affected component: Jenkins Multijob ...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

CVE-2017-1000390: Missing Authorization

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build...

PT-2018-5172

Name of the Vulnerable Software and Affected Versions Jenkins Multijob plugin versions 1.25 and earlier Description The issue concerns a permission check in the Resume Build action. Specifically, it allows anyone with Job/Read permission to resume the build without proper authorization. The...