medium4.3
CVE-2017-1000243
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Impact
Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Favorite Plugin | through 2.1.4 |