Security Advisory

CVE-2023-24431

4.3
MEDIUM

Vulnerability Description

A missing permission check in Jenkins Orka by MacStadium Plugin 1.31 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published Date January 26, 2023
Official Source NIST NVD Advisory