CVE-2026-70444

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70444

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2026-70444

The CVE covers a missing permission check in the Jenkins Violation Comments to GitLab Plugin (versions 2.62.0 and earlier). The underlying issue is an HTTP endpoint that does not enforce correct permissions, allowing users with Overall/Read privileges to enumerate credentials IDs stored in Jenkin...