CVE-2020-2260: Missing permission check in Perfecto Plugin

The vulnerability stems from a missing permission check in the connection test method. Jenkins plugins typically implement such functionality in descriptor classes (DescriptorImpl) with methods named doTest* for form validation. The pattern matches CWE-862 (Missing Authorization) where security checks are absent in sensitive operations. The high confidence comes from: 1) Standard Jenkins plugin architecture patterns 2) The explicit mention of a connection test method in advisories 3) The nature of the fix requiring Administer permission suggests authorization was added to an existing endpoint.