4.3 Medium

CVE-2026-70433 Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission…

Description

Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins HCL AppScan Plugin 1.8	earliest → 1.8.3	No fix stated

Do you use Jenkins HCL AppScan Plugin?

Track this CVE Watch Jenkins HCL AppScan Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2026-70433

Timeline

Published August 5, 2026
Last modified August 6, 2026

References

Jenkins Security Advisory 2026-08-05 www.jenkins.io

Track this CVE