4 matches found
CVE-2022-36919
A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS6.4AI score0.00661EPSS
SaveExploits0References1
CVE-2022-36919
A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS4.5AI score
SaveExploits0References2
CVE-2022-36919
CVE-2022-36919 affects Jenkins Coverity Plugin (versions ≤ 1.11.4). A missing permission check in an HTTP endpoint allows users with Overall/Read to enumerate credentials IDs stored in Jenkins, enabling information disclosure and potentially aiding credential theft via other vulnerabilities. Impa...
4.3CVSS4.4AI score0.00661EPSS
SaveExploits0References2Affected Software1
20