Improper Validations

2023-06-2708:25:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jenkins

digital.ai

app management

improper validations

vulnerability

http endpoints

permission checks

sensitive data

stored credentials

0.001 Low

EPSS

Percentile

30.0%

JSON

Jenkins Digital.ai App Management Publisher Plugin is vulnerable to Improper Validations. The vulnerability exists due to not performing permission checks in several HTTP endpoints which allows an attacker with read or overall permissions to capture sensitive data such as stored credentials.

CPENameOperatorVersion
digital.ai app management publisherle2.6
digital.ai app management publisherle2.6

CPE	Name	Operator	Version
	digital.ai app management publisher	le	2.6
	digital.ai app management publisher	le	2.6

References

www.openwall.com/lists/oss-security/2023/06/14/5

github.com/advisories/GHSA-5ghv-wxh9-7356

www.jenkins.io/security/advisory/2023-06-14/#SECURITY-2911