Description
The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.
Remediation
References
https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20
Related Vulnerabilities
CVE-2023-29215 Vulnerability in maven package org.apache.linkis:linkis-common
CVE-2016-6816 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2023-29198 Vulnerability in npm package electron
CVE-2020-16024 Vulnerability in maven package org.webjars.npm:electron
CVE-2020-6541 Vulnerability in maven package org.webjars.npm:electron