| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:cloudbees-jenkins-advisor | < 3.2.1 | 3.2.1 |
| health advisor by cloudbees | ≤ 3.2.0 |
Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint.
This allows attackers with Overall/Read permission to view an administrative configuration page.
Health Advisor by CloudBees Plugin 3.2.1 requires Overall/Administer to view its administrative configuration page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free