Skip to content
Sign in
6.8 Medium

CVE-2025-24401 Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions…

Description

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.

Affected products and versions

Product Affected versions Fixed in
Jenkins Folder-based Authorization Strategy Plugin Versions not published

Other CVEs of Jenkins Folder-based Authorization Strategy Plugin

The 2 CVEs of Jenkins Folder-based Authorization Strategy Plugin →
CVE-2022-27200 Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the… Not rated
Track this CVE