CVE-2025-24397

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...

CVE-2025-24397

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins...

CVE-2025-24397

The Jenkins GitLab Plugin (version 1.9.6 and earlier ) contains an incorrect permission check in an HTTP endpoint. This flaw allows attackers who possess global Item/Configure permission —but lack the specific Item/Configure permission for a particular job—to enumerate credential IDs for GitLab A...