Not rated
CVE-2022-28151 A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read…
Description
A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Job and Node ownership Plugin 0.13 | earliest → 0.13.0 | No fix stated |
Other CVEs of Jenkins Job and Node ownership Plugin
The 4 CVEs of Jenkins Job and Node ownership Plugin →
CVE-2022-28152
A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows…
Not rated
CVE-2022-28150
A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows…
Not rated
CVE-2022-28149
Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in…
Not rated