Beveiligingsadvies

CVE-2026-92133

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 13:53:10

Laatst bijgewerkt 2026-09-16 19:10:56

Toegewezen door jenkins

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab API token credentials they are not entitled to use.

← Alle CVE's bekijken Bekijk op cve.org ↗