medium4.3
CVE-2022-28151
A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item…
Impact
A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Job And Node Ownership | through 0.13.0 |