Lucene search
HistoryNov 29, 2023 - 2:15 p.m.
CVE-2023-49653
cve-2023-49653
jenkins
jira
plugin
credentials
lookup
attackers
permission
access
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.2%
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
Affected configurations
Node
jenkinsjiraRange≤3.11jenkins
Related
cvelist
cvelist
CVE-2023-49653
2023-11-29 13:45:10
osv
osv
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
2023-11-29 15:30:21
CVE-2023-49653
2023-11-29 14:15:07
prion
prion
Design/Logic Flaw
2023-11-29 14:15:00
github
github
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
2023-11-29 15:30:21
alpinelinux
alpinelinux
CVE-2023-49653
2023-11-29 14:15:07
cve
cve
CVE-2023-49653
2023-11-29 14:15:07
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-11-29)
2023-11-29 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.2%
Related for NVD:CVE-2023-49653