Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.
{
"nvd_published_at": "2014-10-17T15:55:00Z",
"github_reviewed_at": "2024-03-06T15:20:01Z",
"cwe_ids": [],
"github_reviewed": true,
"severity": "MODERATE"
}