Design/Logic Flaw

2023-08-1615:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

maven

artifact

choicelistprovider

nexus

plugin

design flaw

unauthorized access

credentials

0.0005 Low

EPSS

Percentile

18.1%

JSON

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

CPENameOperatorVersion
maven_artifact_choicelistprovider_\\(nexus\\)le1.14

CPE	Name	Operator	Version
	maven_artifact_choicelistprovider_\\(nexus\\)	le	1.14

References

www.openwall.com/lists/oss-security/2023/08/16/3

www.jenkins.io/security/advisory/2023-08-16/

0.0005 Low

EPSS

Percentile

18.1%

JSON

Related for PRION:CVE-2023-40347