CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1...

CVE-2023-46651

Affected software: Jenkins Warnings Plugin, version 10.5.0 and earlier (backport fix to 10.4.1). Vulnerability: The plugin does not set the appropriate context for credentials lookup, allowing users with Item/Configure permission to access credentials they are not entitled to. Impact: Potential u...