CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

org.jenkins-ci.plugins:azure-acs (>=0.1.4, <=0.1.5), org.jenkins-ci.plugins:azure-app-service (0.1.3) +4 more potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.3)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-acs =0.1.4, =0.3.0, =0.4.8, =0.6.0 -...

org.jenkins-ci.plugins:azure-app-service (0.1) potentially affected by CVE-2023-25768 via org.jenkins-ci.plugins:azure-credentials (1.0)

org.jenkins-ci.plugins:azure-credentials MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:azure-credentials and may be impacted: - org.jenkins-ci.plugins:azure-app-service 0.1 Source cves: CVE-2023-25768 Source...

CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...

CVE-2023-25768

CVE-2023-25768 : A missing permission check in the Jenkins Azure Credentials Plugin (253.v887e0f9e898b and earlier) allows users with Overall/Read to connect to an attacker-specified web server. Documented impact: limited to integrity impact (I) and no confidentiality/availability impact per sour...

CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server...