Skip to content
Sign in
Not rated

CVE-2023-46652 A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins lambdatest-automation Plugin 1.20 earliest → 1.20.9 No fix stated

Other CVEs of Jenkins lambdatest-automation Plugin

The 2 CVEs of Jenkins lambdatest-automation Plugin →
CVE-2023-46653 Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level,… Not rated
Track this CVE