Not rated

CVE-2023-37944 A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission…

Description

A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Datadog Plugin 5.4	earliest → 5.4.1	No fix stated

Do you use Jenkins Datadog Plugin?

Track this CVE Watch Jenkins Datadog Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37944

Timeline

Published July 12, 2023
Last modified November 7, 2024

References

Jenkins Security Advisory 2023-07-12 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE