CVE-2020-2272: Missing permission checks in Jenkins ElasTest Plugin

The vulnerability stems from a missing permission check in a form validation method. Jenkins plugins typically implement configuration validation methods using doValidate patterns in DescriptorImpl classes. The advisory explicitly mentions a form validation method with missing authorization (CWE-862) that handles connection testing. The combination of credential handling and URL validation without permission checks matches the described attack vector. The function name and location follow Jenkins plugin conventions for configuration validation handlers.