Lucene search

PRIOn knowledge basePRION:CVE-2023-50769

HistoryDec 13, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-12-1318:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

missing permission checks

jenkins nexus platform plugin

credential capture

nvd

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.3%

JSON

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CPENameOperatorVersion
nexus_platformeq<= 3.18.0-3

CPE	Name	Operator	Version
	nexus_platform	eq	<= 3.18.0-3

References

www.openwall.com/lists/oss-security/2023/12/13/4

www.jenkins.io/security/advisory/2023-12-13/