Description
In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download a JDK.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Directory Traversal (2.4.19)
WordPress Plugin Events Manager Pro CSV Injection (2.6.7.1)
Oracle Database Server CVE-2006-5334 Vulnerability (CVE-2006-5334)
Oracle Database Server CVE-2019-2956 Vulnerability (CVE-2019-2956)
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)