Description

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Queue.java that allows attackers with Overall/Read permission to cancel queued builds.

Remediation

References

CVE-2018-1999003

Related Vulnerabilities

WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Information Disclosure (5.1.2)

D3.js Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16044)

Oracle Database Server CVE-2009-1015 Vulnerability (CVE-2009-1015)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-2829)

WordPress Plugin DW Question & Answer Multiple Unspecified Vulnerabilities (1.4.4)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-863 CVE-2018-1999003