Not rated

CVE-2023-24451 A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Cisco Spark Notifier Plugin 1.1.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Cisco Spark Notifier Plugin 1.1	earliest → 1.1.1	No fix stated

Do you use Jenkins Cisco Spark Notifier Plugin?

Track this CVE Watch Jenkins Cisco Spark Notifier Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-24451

Timeline

Published January 24, 2023
Last modified August 2, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE