CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/03/06 5:15 p.m.•36 views

CVE-2024-28155

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names...

4.3CVSS5.5AI score0.0045EPSS

Exploits0References2

Cvelist•added 2024/03/06 5:1 p.m.•35 views

CVE-2024-28155

6.2AI score0.0045EPSS

Exploits0References2

CVE•added 2024/03/06 5:1 p.m.•79 views

CVE-2024-28155

CVE-2024-28155 affects Jenkins AppSpider Plugin versions 1.0.16 and earlier. The issue is a lack of permission checks across several HTTP endpoints, which allows attackers with Overall/Read permission to access information about available scan config names, engine group names, and client names. T...

4.3CVSS6.1AI score0.0045EPSS

Exploits0References2Affected Software1