| Package | Affected versions | Patched versions |
|---|---|---|
| com.synopsys.jenkinsci:ownership | < 0.12.0 | 0.12.0 |
| job and node ownership | ≤ 0.11.0 |
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in
OwnershipDescription.java,
JobOwnerJobProperty.java,
and OwnerNodeProperty.java
that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free