medium4.3
CVE-2022-34818
Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall…
Impact
Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Failed Job Deactivator | through 1.2.1 |