Affecting org.jenkins-ci.plugins:cloud-stats artifact, versions [,0.27)Report new vulnerabilities
org.jenkins-ci.plugins:cloud-stats is an a plugin that collects activities of other plugins and visualizes them as well as provides them to other plugins in form of an API.
Affected versions of this package are vulnerable to Improper Authentication. It does not perform a permission check in an HTTP endpoint.This allows attackers with overall/read permission and knowledge of random activity IDs to view related provisioning exception error messages.
A fix was pushed into the
master branch but not yet published.