Description
An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions.
Remediation
References
https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746
Related Vulnerabilities
CVE-2018-1287 Vulnerability in maven package org.apache.jmeter:apachejmeter
CVE-2019-1003058 Vulnerability in maven package org.jvnet.hudson.plugins:ftppublisher
CVE-2012-5886 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2020-16037 Vulnerability in maven package org.webjars.npm:electron
CVE-2022-43425 Vulnerability in maven package io.jenkins.plugins:custom-checkbox-parameter