github_osv/GHSA-f9v6-p7hp-c3qx
Missing permission checks in Jenkins P4 Plugin
A missing permission check in Jenkins P4 Plugin 1.10.10 and earlier allows attackers with Overall/Read permission to trigger builds or add labels in the Perforce repository.
P4 Plugin 1.10.11 appropriate user permissions for the affected HTTP endpoints.
gitlab/maven/org.jenkins-ci.plugins/p4/CVE-2020-2142
Missing Authorization
A missing permission check in Jenkins P4 Plugin allows attackers with Overall/Read permission to trigger builds.