Description
A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration.
Remediation
References
Related Vulnerabilities
WordPress Plugin Sign-up Sheets Cross-Site Scripting (1.0.13)
Ruby Other Vulnerability (CVE-2016-2337)
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2026-77123)
PHP Other Vulnerability (CVE-2009-1271)
XWiki Missing Authentication for Critical Function Vulnerability (CVE-2022-24820)