Information disclosure

2019-07-1114:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

JSON

A missing permission check in Jenkins Docker Plugin 1.1.6 and earlier in various ‘fillCredentialsIdItems’ methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.

CPENameOperatorVersion
dockerle1.1.6

CPE	Name	Operator	Version
	docker	le	1.1.6

References

www.openwall.com/lists/oss-security/2019/07/11/4

www.securityfocus.com/bid/109156

jenkins.io/security/advisory/2019-07-11/