Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-49653HistoryNov 29, 2023 - 2:15 p.m.
CVE-2023-49653
2023-11-2914:15:07
Alpine Linux Development Team
security.alpinelinux.org
8
jenkins
jira plugin
unauthorized access
credentials
security vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.2%
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | jenkins | = 2.387.3-r0 | UNKNOWN |
| Alpine | edge-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | jenkins | = 2.440.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | jenkins | = 2.440.2-r0 | UNKNOWN |
Related
cvelist
cvelist
CVE-2023-49653
2023-11-29 13:45:10
nvd
nvd
CVE-2023-49653
2023-11-29 14:15:07
osv
osv
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
2023-11-29 15:30:21
CVE-2023-49653
2023-11-29 14:15:07
prion
prion
Design/Logic Flaw
2023-11-29 14:15:00
github
github
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
2023-11-29 15:30:21
cve
cve
CVE-2023-49653
2023-11-29 14:15:07
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-11-29)
2023-11-29 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.2%
Related for ALPINE:CVE-2023-49653