CVE-2022-45394: Missing permission check in Jenkins Delete log Plugin

The vulnerability stems from an unauthenticated HTTP endpoint handling log deletion operations. Jenkins plugin security typically requires explicit permission checks using methods like checkPermission() or requiresPermission annotations. The advisory explicitly states the missing authorization check for the log deletion operation, which would normally be implemented in the handler method for this endpoint (commonly named doDeleteLog in Jenkins plugin conventions). The combination of 1) destructive operation (log deletion) 2) missing permission check 3) CSRF vulnerability (implied by HTTP method handling) strongly indicates the handler method for the deletion endpoint is the vulnerable function.