Описание
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
EPSS
Процентиль: 8%
0.00179
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-693
Связанные уязвимости
CVSS3: 4.3
github
14 дней назад
A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
EPSS
Процентиль: 8%
0.00179
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-693