Design/Logic Flaw

2023-08-2123:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

jenkins fortify plugin

permission check

vulnerability

credentials capture

nvd

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.3%

JSON

A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.