1 results (0.004 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Una falta de comprobación de permisos en Jenkins Apprenda Plugin versiones 2.2.0 y anteriores, permite a usuarios con permiso de Overall/Read enumerar los ID de credenciales de las credenciales almacenadas en Jenkins • http://www.openwall.com/lists/oss-security/2022/09/21/5 https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2710 • CWE-862: Missing Authorization •