Security Advisory

CVE-2023-46652

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-25 13:45:54
Last updated 2025-02-13 17:14:26
Assigner jenkins
State PUBLISHED

Description

A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.