Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Delphix
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-40345 1 Jenkins 1 Delphix 2023-08-18 N/A 6.5 MEDIUM
Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
CVE-2023-40344 1 Jenkins 1 Delphix 2023-08-18 N/A 4.3 MEDIUM
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.