1 matches found
Unprivileged users with Overall/Read access are able to enumerate credential IDs in Azure VM Agents Plugin
Azure VM Agents Plugin provides a list of applicable credential IDs to allow administrators configuring the plugin to select the one to use. This functionality did not check permissions, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those could be used as...
6.5CVSS6.5AI score0.01277EPSS
SaveExploits0Affected Software1
20