Skip to content
4.3 Medium

CVE-2026-70447 Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read…

Description

Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins AWS CodeBuild Plugin 0.59 earliest → 0.59 No fix stated
Track this CVE