Medium severity6.5NVD Advisory· Published Mar 13, 2018· Updated Jun 17, 2026

CVE-2018-1000107

Description

An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.synopsys.jenkinsci:ownershipMaven	< 0.12.0	0.12.0

Affected products

ghsa-coords
pkg:maven/com.synopsys.jenkinsci/ownership
Range: < 0.12.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-72x3-c7jc-q35xghsaADVISORY
jenkins.io/security/advisory/2018-02-26/nvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-1000107ghsaADVISORY
github.com/jenkinsci/ownership-plugin/blob/2908d3c0e23a34919449838304090210640c67c1/CHANGELOG.mdghsaWEB
github.com/jenkinsci/ownership-plugin/commit/42487df17cd272e504d3cd3e09abb4904f80dba2ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000