Skip to content
Sign in
4.3 Medium

CVE-2026-70444 A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with…

Description

A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Violation Comments to GitLab Plugin 2.62 earliest → 2.62.0 No fix stated

Other CVEs of Jenkins Violation Comments to GitLab Plugin

The 3 CVEs of Jenkins Violation Comments to GitLab Plugin →
CVE-2019-10415 Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in its global… Not rated CVE-2019-10416 Jenkins Violation Comments to GitLab Plugin 2.28 and earlier stored credentials unencrypted in job config.xml files on… Not rated
Track this CVE