CVE-2020-2310 Vulnerability in maven package org.jenkins-ci.plugins:ansible

Description

Missing permission checks in Jenkins Ansible Plugin 1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Remediation

References

https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1943

Related Vulnerabilities

CVE-2023-49798 Vulnerability in npm package @openzeppelin/contracts-upgradeable

CVE-2020-27885 Vulnerability in maven package org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.store.feature

CVE-2023-26045 Vulnerability in npm package nodebb

CVE-2021-27807 Vulnerability in maven package org.apache.pdfbox:pdfbox

CVE-2023-50730 Vulnerability in maven package org.typelevel:grackle-core_2.13

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N