Description
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Email Template PHP Object Injection (2.4.0)
WordPress Plugin Photospace Responsive Gallery Unspecified Vulnerability (1.1.7)
Drupal Core 7.x Security Bypass (7.0 - 7.90)
PostgreSQL Improper Access Control Vulnerability (CVE-2019-10127)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5266)