Lucene search

K
osvGoogleOSV:GHSA-8RFC-V3VJ-J62W
HistoryMay 24, 2022 - 5:03 p.m.

Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins

2022-05-2417:03:49
Google
osv.dev
5
jenkins
alauda
devops
pipeline
plugin
permission
check
credentials
capture

EPSS

0.001

Percentile

28.4%

A missing permission check in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-8RFC-V3VJ-J62W