description: Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permissions to be granted Overall/Manage and Overall/SystemRead permissions, even if those permissions are disabled and should not be granted.
affected:
{
defaultStatus: unknown
product: Jenkins Assembla Auth Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.14, status: affected, version: 0, versionType: maven
}