CVE-2022-34818: Jenkins Failed Job Deactivator

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Jenkins Failed Job Deactivator Plugin 1.2.1 and earlier does not perform permission checks in several views and HTTP endpoints, allowing attackers with Overall/Read permission to disable jobs.

Affected products

• Jenkins Failed Job Deactivator: up to and including 1.2.1

Published 2022-06-30. Last modified 2026-06-17.