Executive brief
Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
Affected products
- Maven org.jenkins-ci.plugins:liquibase-runner
Junglewise Threat Intelligence
CVE-2020-2285: Missing permission check in Jenkins Liquibase Runner Plugin allows enumerating credentials IDs
CVE-2020-2285 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:liquibase-runner (Maven). Vendors: Maven.