Lucene search
PRIOn knowledge basePRION:CVE-2023-37965HistoryJul 12, 2023 - 4:15 p.m.
Design/Logic Flaw
2023-07-1216:15:00
PRIOn knowledge base
www.prio-n.com
4
flaw
jenkins
elasticbox
unauthorized access
credential capture
0.001 Low
EPSS
Percentile
21.0%
A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| elasticbox_ci | le | 5.0.1 |
Related
github
github
Jenkins ElasticBox CI Plugin missing permission check
2023-07-12 18:30:39
alpinelinux
alpinelinux
CVE-2023-37965
2023-07-12 16:15:14
osv
osv
CVE-2023-37965
2023-07-12 16:15:14
Jenkins ElasticBox CI Plugin missing permission check
2023-07-12 18:30:39
cve
cve
CVE-2023-37965
2023-07-12 16:15:14
veracode
veracode
Missing Permission Check
2023-07-20 09:57:19
cvelist
cvelist
CVE-2023-37965
2023-07-12 15:53:03
nvd
nvd
CVE-2023-37965
2023-07-12 16:15:14