4.3
Moyenne
CVE-2026-57299 Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers…
Description
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Contrast Continuous Application Security Plugin 3.11 | premières → 3.11 | Pas de correctif indiqué |
Autres CVE de Jenkins Contrast Continuous Application Security Plugin
Les 4 CVE de Jenkins Contrast Continuous Application Security Plugin →
CVE-2026-57298
A cross-site request forgery (CSRF) vulnerability in Jenkins Contrast Continuous Application Security Plugin 3.11 and…
5.4
Moyenne
CVE-2026-57297
A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows…
5.4
Moyenne
CVE-2022-43420
Jenkins Contrast Continuous Application Security Plugin 3.9 and earlier does not escape data returned from the…
5.4
Moyenne