Package · Maven

io.jenkins.plugins:thycotic-secret-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.3

CVE-2023-30518

Jenkins Thycotic Secret Server Plugin missing permissions check

A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Project Jenkins Thycotic Secret Server Plugin io.jenkins.plugins:thycotic-secret-server Web / CMS Maven

Apr 12, 2023