Information disclosure

2020-11-0415:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.3%

JSON

A missing permission check in Jenkins Azure Key Vault Plugin 2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CPENameOperatorVersion
azure_key_vaultle2.0

CPE	Name	Operator	Version
	azure_key_vault	le	2.0

References

www.jenkins.io/security/advisory/2020-11-04/