description: Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.
affected:
{
vendor: Jenkins Project
product: Jenkins AppSpider Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 1.0.16, status: affected
defaultStatus: unaffected
}