Lucene search
GoogleOSV:GHSA-7JF5-P556-75PRHistoryMay 24, 2022 - 4:59 p.m.
Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration
2022-05-2416:59:37
Google
osv.dev
6
0.001 Low
EPSS
Percentile
28.4%
A missing permission check in Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Note: Jenkins has suspended distribution of this plugin.
Related
nvd
nvd
CVE-2019-10470
2019-10-23 13:15:11
cve
cve
CVE-2019-10470
2019-10-23 13:15:11
github
github
Jenkins Kubernetes CI/CD Plugin vulnerable to Credential Enumeration
2022-05-24 16:59:37
osv
osv
CVE-2019-10470
2019-10-23 13:15:11
cvelist
cvelist
CVE-2019-10470
2019-10-23 12:45:43
prion
prion
Design/Logic Flaw
2019-10-23 13:15:00