description: An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.
affected:
{
product: Jenkins Matrix Authorization Strategy Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.6.5, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 2.5.2
status: unaffected, version: 2.6.3.1
}