CVE-2023-6149

Qualys Jenkins Plugin for WAS (versions prior to and including 2.0.11) is affected by a privilege-check flaw during the connectivity check to Qualys Cloud Services. This lack of permission checking allows any user with login access to configure or edit jobs to route or modify requests to a rogue ...