Jenkins Incorrect Authorization Vulnerability - CVE-2018-1999004 - Vulnerability Database

Jenkins Incorrect Authorization Vulnerability - CVE-2018-1999004

Medium

Reference: CVE-2018-1999004

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1999004

Title: Jenkins Incorrect Authorization Vulnerability

Overview:

A Improper authorization vulnerability exists in Jenkins 2.132 and earlier 2.121.1 and earlier in SlaveComputer.java that allows attackers with Overall/Read permission to initiate agent launches and abort in-progress agent launches.