Описание
Missing permission checks in Jenkins Frugal Testing Plugin
A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.
Пакеты
Наименование
io.jenkins.plugins:frugal-testing
maven
Затронутые версииВерсия исправления
<= 1.1
Отсутствует
Связанные уязвимости
CVSS3: 4.3
nvd
больше 2 лет назад
A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to Frugal Testing using attacker-specified credentials.