Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/05/06 12:00 a.m.•18 views

Users with Overall/Read access can enumerate credentials IDs in ec2

ec2 provides a list of applicable credentials IDs to allow users configuring the plugin to select the one to use. This functionality does not correctly check permissions in ec2 1.50.1 and earlier, allowing any user with Overall/Read permission to get a list of valid credentials IDs. Those can be...

4.3CVSS5AI score0.00647EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder