4.3 Medium

CVE-2023-30518 A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Thycotic Secret Server Plugin 1.0	earliest → 1.0.2	No fix stated

Do you use Jenkins Thycotic Secret Server Plugin?

Track this CVE Watch Jenkins Thycotic Secret Server Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-30518

Timeline

Published April 12, 2023
Last modified February 7, 2025

References

Jenkins Security Advisory 2023-04-12 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE