Jenkins: >> Support Core >> 2.76.1 Security Vulnerabilities
An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
CVSS Score
6.5
EPSS Score
0.008
Published
2022-11-15
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.
CVSS Score
6.5
EPSS Score
0.002
Published
2022-02-15