Executive brief
Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:github-branch-source
Junglewise Threat Intelligence
CVE-2017-1000087 · Severity: low · CVSS 3 · Published 2022-05-17
Technologies: org.jenkins-ci.plugins:github-branch-source (Maven). Vendors: Maven.
Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs