Lucene search
HistoryMar 06, 2024 - 5:15 p.m.
CVE-2024-28155
cve-2024-28155
jenkins
appspider
permission checks
http endpoints
overall permission
read permission
scan config
engine group
client names
security vulnerability
0.0004 Low
EPSS
Percentile
9.2%
Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.
Related
github
github
Jenkins AppSpider Plugin missing permission checks
2024-03-06 18:30:38
prion
prion
Design/Logic Flaw
2024-03-06 17:15:00
cvelist
cvelist
CVE-2024-28155
2024-03-06 17:01:58
osv
osv
Jenkins AppSpider Plugin missing permission checks
2024-03-06 18:30:38
cve
cve
CVE-2024-28155
2024-03-06 17:15:10
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-03-06)
2024-03-07 00:00:00