CyberRota Analysis
AI-GeneratedA missing permission check in the Jenkins Pipeline: Build Step Plugin allows unauthorized cancellation of downstream builds that are awaited by the `waitForBuild` step when the `propagateAbort` parameter is used. This vulnerability could lead to unintended disruptions in build processes, potentially affecting CI/CD workflows. Jenkins administrators and users of the affected plugin should prioritize remediation to ensure proper access controls are enforced.
Original NVD Description
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAbort` parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.