Security Advisory

CVE-2023-24436

4.3
MEDIUM

Vulnerability Description

A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published Date January 26, 2023
Official Source NIST NVD Advisory