CVE-2022-36907: Missing permission check in Jenkins OpenShift Deployer Plugin

The vulnerability stems from a missing permission check in a form validation method. Jenkins plugins typically implement form validation through doCheck* methods in Descriptor classes. The advisory specifically mentions this occurs in 'a method implementing form validation' related to URL/credential verification. The OpenShift Deployer Plugin would need such methods to validate() OpenShift server connections, and the lack of permission checks in these methods aligns with the described attack vector where attackers with Read permissions can abuse the validation endpoint.