Description
A Improper authorization vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches, and abort in-progress agent launches.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275)
WordPress Plugin ClickBank Affiliate Ads Multiple Vulnerabilities (1.7)
WordPress Plugin Link Log-external link click monitor SQL Injection (2.0)
WordPress Plugin WordPress Button Plugin MaxButtons Cross-Site Scripting (1.26.0)
PrestaShop Incorrect Authorization Vulnerability (CVE-2020-5279)