Lucene search

K
osvGoogleOSV:GHSA-5557-J87H-CVF4
HistoryJun 16, 2021 - 5:29 p.m.

Missing Authorization in jenkins xray-connector

2021-06-1617:29:26
Google
osv.dev
11
jenkins
xray-connector
authorization
test management
jira plugin
credential enumeration
http endpoint
security vulnerability

EPSS

0.001

Percentile

22.0%

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-5557-J87H-CVF4