Lucene search

K
osvGoogleOSV:GHSA-745W-V492-4FJ5
HistoryMay 24, 2022 - 4:50 p.m.

Missing permission check in Jenkins Docker Plugin

2022-05-2416:50:04
Google
osv.dev
4
jenkins
docker plugin
permission check
credentials
security vulnerability

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

46.4%

A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various ‘fillCredentialsIdItems’ methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

46.4%

Related for OSV:GHSA-745W-V492-4FJ5