1 matches found
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Chatter Notifier Plugin
Chatter Notifier Plugin provides a list of applicable credential IDs to allow users configuring the plugin's functionality to select the one to use. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be...
4.3CVSS5.4AI score
SaveExploits0Affected Software1
20