CVE-2018-1000114

https://notcve.org/view.php?id=CVE-2018-1000114

An improper authorization vulnerability exists in Jenkins Promoted Builds Plugin 2.31.1 and earlier in Status.java and ManualCondition.java that allow an attacker with read access to jobs to perform promotions. Existe una vulnerabilidad de autorización incorrecta en el plugin Promoted Builds para Jenkins, en versiones 2.31.1 y anteriores, en Status.java y ManualCondition.java que permite que un atacante con acceso de lectura a los trabajos realice promociones. • https://jenkins.io/security/advisory/2018-02-26/#SECURITY-746 • CWE-863: Incorrect Authorization •