Executive brief
Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Affected products
- Maven org.jenkins-ci.plugins:job-import-plugin
Junglewise Threat Intelligence
CVE-2022-43413: Jenkins Job Import Plugin allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
CVE-2022-43413 · Severity: low · CVSS 3.1 · Published 2022-10-19
Technologies: org.jenkins-ci.plugins:job-import-plugin (Maven). Vendors: Maven.