Lucene search
Veracode Vulnerability DatabaseVERACODE:41574HistoryJul 24, 2023 - 9:37 a.m.
Improper Access Control
2023-07-2409:37:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
jenkins
dimensions plugin
improper access control
vulnerability
missing permission check
http endpoint
credentials ids
unauthorized actions
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
31.1%
Jenkins Dimensions Plugin is vulnerable to Improper Access Control. The vulnerability exists due to a missing permission check at an http endpoint which allows an attacker to enumerate credentials IDs stored and perform unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jenkins dimensions plugin | le | 0.9.3 | |
| jenkins dimensions plugin | le | 0.9.3 |
Related
osv
osv
CVE-2023-32261
2023-07-19 16:15:09
nvd
nvd
CVE-2023-32261
2023-07-19 16:15:09
prion
prion
Hardcoded credentials
2023-07-19 16:15:00
cve
cve
CVE-2023-32261
2023-07-19 16:15:09
github
github
redhatcve
redhatcve
CVE-2023-32261
2023-07-04 05:17:15
cvelist
cvelist
CVE-2023-32261 Dimensions CM Plugin for Jenkins 0.8.17 – 0.9.3
2023-07-19 15:56:25
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-06-14)
2023-06-16 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
31.1%
Related for VERACODE:41574