Junglewise Threat Intelligence

CVE-2023-24431: Missing permission checks in Jenkins Orka Plugin allow enumerating credentials IDs

CVE-2023-24431 · Severity: low · CVSS 3.1 · Published 2023-01-26

Technologies: io.jenkins.plugins:macstadium-orka (Maven). Vendors: Maven.

Executive brief

Missing permission checks in Jenkins Orka Plugin allow enumerating credentials IDs

Affected products

  • Maven io.jenkins.plugins:macstadium-orka

Related threats