Security Advisory

CVE-2023-49674

4.3
MEDIUM

Vulnerability Description

A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.
Published Date November 29, 2023
Official Source NIST NVD Advisory