Skip to content
Sign in
4.3 Medium

CVE-2026-70445 Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read…

Description

Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Sauce OnDemand Plugin 2.2 earliest → 2.2.0 No fix stated

Other CVEs of Jenkins Sauce OnDemand Plugin

The 2 CVEs of Jenkins Sauce OnDemand Plugin →
CVE-2022-34197 Jenkins Sauce OnDemand Plugin 1.204 and earlier does not escape the name and description of Sauce Labs Browsers… Not rated
Track this CVE