Not rated
CVE-2022-34818 Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP…
Description
Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Failed Job Deactivator Plugin 1.2 | earliest → 1.2.1 | No fix stated |