Aller au contenu
Se connecter
5.4 Moyenne

CVE-2026-57294 A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with…

Description

A missing permission check in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins EC2 Fleet Plugin Versions non publiées

Autres CVE de Jenkins EC2 Fleet Plugin

Les 2 CVE de Jenkins EC2 Fleet Plugin →
CVE-2026-57295 A cross-site request forgery (CSRF) vulnerability in Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier… 5.4 Moyenne
Suivre cette CVE