Lucene search
HistoryNov 29, 2023 - 2:15 p.m.
CVE-2023-49674
cve-2023-49674
permission check
jenkins
neuvector
vulnerability scanner
overall/read permission
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
13.3%
A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.
Affected configurations
Node
jenkinsneuvector_vulnerability_scannerRange≤1.22jenkins
Related
cvelist
cvelist
CVE-2023-49674
2023-11-29 13:45:13
osv
osv
Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
2023-11-29 15:30:21
cve
cve
CVE-2023-49674
2023-11-29 14:15:07
prion
prion
Default credentials
2023-11-29 14:15:00
github
github
Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
2023-11-29 15:30:21
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-11-29)
2023-11-29 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
13.3%
Related for NVD:CVE-2023-49674