4 matches found
CVE-2023-37950
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2023-37950
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2023-37950
CVE-2023-37950 affects Jenkins mabl Plugin 0.0.46 and earlier, where a missing permission check in an HTTP endpoint allows users with Overall/Read access to enumerate credentials IDs stored in Jenkins. This can aid credential harvesting or later exploitation per linked advisories (GHSA-23RR-6PHQ-...
CVE-2023-37950
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...