5 matches found
CVE-2023-40344
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS6.6AI score
SaveExploits0References3
CVE-2023-40344
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS4.4AI score0.00524EPSS
SaveExploits0References3
CVE-2023-40344
Summary (CVE-2023-40344): Jenkins Delphix Plugin, versions 3.0.2 and earlier, has a missing permission check in an HTTP endpoint. This permits attackers holding Overall/Read permission to enumerate credentials IDs stored in Jenkins, which could be leveraged with another vulnerability to capture c...
4.3CVSS4.3AI score0.00524EPSS
SaveExploits0References3Affected Software1
20