Lucene search

Azure Credentials Security Vulnerabilities

cve

CVE-2023-25766

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

4.3CVSS

4.4AI Score

0.001EPSS

2023-02-15 02:15 PM

cve

CVE-2023-25767

A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.

8.8CVSS

8.6AI Score

0.001EPSS

2023-02-15 02:15 PM

cve

CVE-2023-25768

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.

6.5CVSS

6.3AI Score

0.001EPSS

2023-02-15 02:15 PM