CVE-2022-41246

A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2022-41246

CVE-2022-41246 affects Jenkins Worksoft Execution Manager Plugin up to version 10.0.3.503. The root cause is a missing permission check, which allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credential IDs obtained through another method, enabli...

CVE-2022-41246

A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...