Information disclosure

2022-11-1520:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

permission check

plugin

credential enumeration

nvd

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

A missing permission check in Jenkins loader.io Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CPENameOperatorVersion
loader.iole1.0.1

CPE	Name	Operator	Version
	loader.io	le	1.0.1

References

www.openwall.com/lists/oss-security/2022/11/15/4

www.jenkins.io/security/advisory/2022-11-15/