Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:05 a.m.•26 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.4AI score0.00834EPSS
SaveExploits0
OSV
OSV
•added 2023/07/12 4:15 p.m.•22 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.7AI score
SaveExploits0References2
NVD
NVD
•added 2023/07/12 4:15 p.m.•57 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.3AI score0.00834EPSS
SaveExploits0References2
CVE
CVE
•added 2023/07/12 3:52 p.m.•79 views

CVE-2023-37944

The CVE-2023-37944 issue affects Jenkins Datadog Plugin (versions up to 5.4.1). A missing permission check on an HTTP endpoint allows attackers with Overall/Read to connect to an attacker-specified URL using attacker-specified credentials IDs, enabling capture of credentials stored in Jenkins. Mi...

6.5CVSS6.2AI score0.00834EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/07/12 3:52 p.m.•54 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5AI score0.00834EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2023/07/12 3:52 p.m.•74 views

CVE-2023-37944

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.7AI score0.00834EPSS
SaveExploits0References2
Rows per page
Query Builder