Lucene search
PRIOn knowledge basePRION:CVE-2023-24438HistoryJan 26, 2023 - 9:18 p.m.
Design/Logic Flaw
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
2
jenkins
jira
pipeline steps plugin
0.001 Low
EPSS
Percentile
27.6%
A missing permission check in Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira_pipeline_steps | eq | <= 2.0.165.v8846cf59f3db |
Related
github
github
Missing permissions check in Jenkins JIRA Pipeline Steps Plugin
2023-01-26 21:30:18
osv
osv
Missing permissions check in Jenkins JIRA Pipeline Steps Plugin
2023-01-26 21:30:18
cve
cve
CVE-2023-24438
2023-01-26 21:18:17
cvelist
cvelist
CVE-2023-24438
2023-01-24 00:00:00
nvd
nvd
CVE-2023-24438
2023-01-26 21:18:17
nessus
nessus