Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 4:59 p.m.37 views

Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration

A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins. Note: Jenkins has suspended distribution of this plugin...

6.5CVSS4.6AI score0.00836EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder