Aller au contenu
Se connecter
Non notée

CVE-2023-49653 Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers…

Description

Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins JIRA Plugin 3.11 premières → 3.11 Pas de correctif indiqué

Autres CVE de Jenkins JIRA Plugin

Les 3 CVE de Jenkins JIRA Plugin →
CVE-2022-29041 Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira… Non notée CVE-2019-16541 Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions,… Non notée
Suivre cette CVE