An incorrect permission check in Jenkins Support Core Plugin 1206.v14049fa_b_d860 and earlier allows attackers with Support/DownloadBundle permission to download a previously created support bundle containing information limited to users with Overall/Administer permission.
CPE | Name | Operator | Version |
---|---|---|---|
support_core | eq | < 1206.1208.v9b7a1d48db0f |