Skip to content
Sign in
4.3 Medium

CVE-2026-70438 A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with…

Description

A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Parameterized Remote Trigger Plugin 3.2 earliest → 3.2.2 No fix stated

Other CVEs of Jenkins Parameterized Remote Trigger Plugin

The 3 CVEs of Jenkins Parameterized Remote Trigger Plugin →
CVE-2026-84676 Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the… 4.3 Medium CVE-2020-2239 Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration… Not rated
Track this CVE