Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper context being set during credentials lookup. An attacker can access credentials they are not authorized to use by leveraging Item/Configure permissions to trigger Jenkins to send these credentials t...

CVE-2026-70443

Jenkins Horreum Plugin 0.16.162.v33b4aab5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL...

PT-2026-68278

Name of the Vulnerable Software and Affected Versions Jenkins Horreum Plugin versions 0.16.162.v33b 4a a b 5f828 and earlier Description An issue exists where the plugin fails to set the appropriate context for credentials lookup. This allows users with Item/Configure permissions to trick Jenkins...

CVE-2026-70443: Improper Privilege Management

Jenkins Horreum Plugin 0.16.162.v33b4aab5f828 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to have Jenkins send credentials they are not entitled to use to the administrator-configured Horreum URL...