github_osv/GHSA-72x3-c7jc-q35x
Improper authorization in Jenkins Job and Node Ownership Plugin
An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in
```
OwnershipDescription.java,
JobOwnerJobProperty.java,
and OwnerNodeProperty.java
```
that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.
gitlab/maven/com.synopsys.jenkinsci/ownership/CVE-2018-1000107
Incorrect Authorization
An improper authorization vulnerability exists in the Jenkins Ownership Plugin in `OwnershipDescription.java`, `JobOwnerJobProperty.java`, and `OwnerNodeProperty.java` that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related permissions to override ownership metadata.