Skip to content
OpenAdvisories

Package · Maven

org.jvnet.hudson.plugins:hipchat

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Jenkins HipChat Plugin allows attackers with Overall/Read access to obtain credential IDs

    An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.