3 matches found
GHSA-J52R-PMQV-WM38 Missing permission check in Jenkins Support Core Plugin
A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles...
CVE-2019-16539
A missing permission check in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete support bundles...
PT-2019-14695 · Jenkins · Jenkins Support Core Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 2.63 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to delete support bundles. Recommendations: For Jenkins Support Core Plugin versions 2.6...