Jenkins Folder-based Authorization Strategy Plugin Incorrect Permission Grant Vulnerability

A vulnerability exists in the Jenkins Folder-based Authorization Strategy Plugin in versions through 217.vd5b_18537403e. The plugin fails to properly verify that granted permissions are enabled, which could allow users who previously had certain permissions, such as Overall/Manage, to access functionalities they are no longer entitled to.

Impact

Exploitation of this vulnerability could lead to unauthorized access to certain functionalities within Jenkins, allowing users to perform actions or access features they should not have rights to.