CVE-2026-70447

The Jenkins AWS CodeBuild Plugin (version 0.59 and earlier ) is vulnerable to a missing permission check in several HTTP endpoints. This flaw allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored within Jenkins. These IDs could potentially be used in mul...