CVE-2022-45383

An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fabd860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission...

PT-2022-27485 · Jenkins · Jenkins Support Core Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Support Core Plugin versions 1206.v14049fa b d860 and earlier Description: An issue exists due to an incorrect permission check, allowing attackers with Support/DownloadBundle permission to download previously created support bundles...