PT-2025-45749

Jenkins MCP Server Plugin 0.84.v50ca 24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission getJobSc...