Security Advisory

CVE-2025-24401

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-22 17:02:54
Last updated 2025-01-23 16:07:38
Assigner jenkins
State PUBLISHED

Description

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality theyre no longer entitled to.