Description

Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.

Remediation

References

https://jenkins.io/security/advisory/2017-10-23/

http://www.securityfocus.com/bid/102824

Related Vulnerabilities

CVE-2022-21122 Vulnerability in npm package metacalc

CVE-2023-34247 Vulnerability in npm package @keystone-6/auth

CVE-2013-2067 Vulnerability in maven package org.apache.tomcat:catalina

CVE-2023-1664 Vulnerability in maven package org.keycloak:keycloak-core

CVE-2018-6341 Vulnerability in npm package react-dom

Severity

Medium

Classification

CWE-862 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Vendor Advisory Third Party Advisory VDB Entry