Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jhcq-6wqp-qcfx

Опубликовано: 24 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.

An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.

EPSS

Процентиль: 19%
0.0027
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.3
nvd
2 месяца назад

An incorrect permission check in Jenkins Gitee Plugin 1288.v18b_deb_c9069b_ and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins.

EPSS

Процентиль: 19%
0.0027
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862