description: A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read permission to change the owners and item-specific permissions of a job.
affected:
{
product: Jenkins Job and Node ownership Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 0.13.0, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: unknown, version: next of 0.13.0, versionType: custom
}