4 matches found
CVE-2023-37950
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS6.4AI score0.00539EPSS
SaveExploits0
CVE-2023-37950
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS0.00539EPSS
SaveExploits0References2
CVE-2023-37950
CVE-2023-37950 affects Jenkins mabl Plugin 0.0.46 and earlier, where a missing permission check in an HTTP endpoint allows users with Overall/Read access to enumerate credentials IDs stored in Jenkins. This can aid credential harvesting or later exploitation per linked advisories (GHSA-23RR-6PHQ-...
4.3CVSS4.4AI score0.00539EPSS
SaveExploits0References2Affected Software1
20