Security Advisory

CVE-2025-47887

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-14 20:35:56

Last updated 2025-05-15 13:26:54

Assigner jenkins

State PUBLISHED

Description

Missing permission checks in Jenkins Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.

← Browse all CVEs View on cve.org ↗