Package · Maven

org.jenkins-ci.plugins:azure-credentials

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.3

CVE-2023-25766

Missing Authorization in Jenkins Azure Credentials Plugin

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Jenkins Project Jenkins Azure Credentials Plugin org.jenkins-ci.plugins:azure-credentials Web / CMS Maven

Feb 15, 2023
Medium 6.5

CVE-2023-25768

Missing Authorization in Jenkins Azure Credentials Plugin

A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.

Jenkins Project Jenkins Azure Credentials Plugin org.jenkins-ci.plugins:azure-credentials Web / CMS Maven

Feb 15, 2023