CVE-2022-36919

Publication date

2022-07-27 14:28:45

Family

jenkins

State

PUBLISHED

Description

A missing permission check in Jenkins Coverity Plugin 1.11.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.