456 matches found
CVE-2025-24403
A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...
CVE-2025-24403
A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...
CVE-2025-24403
The Jenkins Azure Service Fabric Plugin (version 1.6 and earlier ) contains a missing permission check in several HTTP endpoints. This vulnerability allows attackers with Overall/Read permission to enumerate the credentials IDs of Azure credentials stored within Jenkins. These IDs could potential...
CVE-2025-24397
An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...
CVE-2025-24397
The Jenkins GitLab Plugin (version 1.9.6 and earlier ) contains an incorrect permission check in an HTTP endpoint. This flaw allows attackers who possess global Item/Configure permission —but lack the specific Item/Configure permission for a particular job—to enumerate credential IDs for GitLab A...
Jenkins plugin Azure Service Fabric 安全漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...
CSRF vulnerability and missing permission checks in service-fabric
service-fabric 1.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another...
Incorrect permission check in gitlab-plugin allows enumerating credentials IDs
gitlab-plugin 1.9.6 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token credentials and Secret text...
CVE-2025-24403: Missing Authorization
A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins...
PT-2025-5361
Name of the Vulnerable Software and Affected Versions Jenkins Azure Service Fabric Plugin versions 1.6 and earlier Description A missing permission check in the Jenkins Azure Service Fabric Plugin allows attackers with Overall/Read permission to enumerate the IDs of Azure credentials stored in...
CVE-2024-48125
An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...
CVE-2024-48125
The Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I , an entry-level X-ray equipment electronic component, contains a security vulnerability in its AsDB service . An attacker can exploit this issue by sending crafted GIOP protocol requests to enumerate user credentials . The vulnerability result...
CVE-2024-48125: Exposure of Sensitive Information to an Unauthorized Actor
An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...
CVE-2024-48125
An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...
CVE-2024-48125
An issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate user credentials via crafted GIOP protocol requests...
Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I 安全漏洞
The Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I is an entry-level X-ray equipment electronic component from Smiths Detection, UK. A security vulnerability exists in the Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I, which stems from an issue in the AsDB service that allows an attacker to...
CVE-2024-42457
CVE-2024-42457 concerns Veeam Backup & Replication. Reported vulnerabilities allow users with limited operator roles to expose saved credentials via the product’s remote management interface, by abusing a session object that enables credential enumeration and exploitation. The attack is facilitat...
CVE-2024-42457
A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading ...
CVE-2024-42457: Insufficiently Protected Credentials
A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading ...
