Lucene search
PRIOn knowledge basePRION:CVE-2023-23848HistoryFeb 15, 2023 - 7:15 p.m.
Design/Logic Flaw
2023-02-1519:15:00
PRIOn knowledge base
www.prio-n.com
3
design
logic flaw
synopsys
jenkins
coverity plugin
permission checks
http server
credentials
nvd
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| synopsys_coverity | lt | 3.0.3 |
Related
cve
cve
CVE-2023-23848
2023-02-15 19:15:13
osv
osv
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
2023-02-15 21:30:30
alpinelinux
alpinelinux
CVE-2023-23848
2023-02-15 19:15:13
nvd
nvd
CVE-2023-23848
2023-02-15 19:15:13
cvelist
cvelist
CVE-2023-23848
2023-02-15 00:00:00
github
github
CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials
2023-02-15 21:30:30
