Описание
Jenkins Multijob plugin did not check permissions in the Resume Build action
Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build. Multijob plugin 1.26 introduced a permission check requiring Overall/Administer. This was lowered to Job/Build in version 1.27.
Пакеты
Наименование
org.jenkins-ci.plugins:jenkins-multijob-plugin
maven
Затронутые версииВерсия исправления
<= 1.25
1.26
Связанные уязвимости
CVSS3: 4.3
nvd
около 8 лет назад
Jenkins Multijob plugin version 1.25 and earlier did not check permissions in the Resume Build action, allowing anyone with Job/Read permission to resume the build.