Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-40345HistoryAug 16, 2023 - 3:15 p.m.
CVE-2023-40345
2023-08-1615:15:11
Alpine Linux Development Team
security.alpinelinux.org
7
jenkins delphix plugin
vulnerability
credentials access
unix
cve-2023-40345
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.4%
Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.452.2-r0 | UNKNOWN |
Related
cvelist
cvelist
CVE-2023-40345
2023-08-16 14:32:55
osv
osv
CVE-2023-40345
2023-08-16 15:15:11
Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
2023-08-16 15:30:18
prion
prion
Design/Logic Flaw
2023-08-16 15:15:00
cve
cve
CVE-2023-40345
2023-08-16 15:15:11
github
github
Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
2023-08-16 15:30:18
nvd
nvd
CVE-2023-40345
2023-08-16 15:15:11
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-08-16)
2023-08-21 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.4%
Related for ALPINE:CVE-2023-40345