Security Advisory

CVE-2018-1000107

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-13 13:00:00

Last updated 2024-09-17 03:48:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.

← Browse all CVEs View on cve.org ↗