Executive brief
Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:pipeline-maven
Junglewise Threat Intelligence
CVE-2020-2233: Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs
CVE-2020-2233 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:pipeline-maven (Maven). Vendors: Maven.
Related threats
- Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin
- XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
- Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name
- CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials
- Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials