Executive brief
Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
Affected products
- Maven org.jenkins-ci.plugins:pipeline-build-step
Junglewise Threat Intelligence
CVE-2020-2118: Users with Overall/Read access can enumerate credential IDs in Pipeline GitHub Notify Step Plugin
CVE-2020-2118 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:pipeline-build-step (Maven). Vendors: Maven.