A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2022-07-27 15:15
Updated : 2022-07-27 18:15
NVD link : CVE-2022-36919
Mitre link : CVE-2022-36919
JSON object : View
Products Affected
No product.
CWE
CWE-862
Missing Authorization
