Skip to content
Sign in
Not rated

CVE-2022-25190 A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Conjur Secrets Plugin 1.0 earliest → 1.0.11 No fix stated

Other CVEs of Jenkins Conjur Secrets Plugin

The 3 CVEs of Jenkins Conjur Secrets Plugin →
CVE-2022-23117 Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent… Not rated CVE-2022-23116 Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent… Not rated
Track this CVE