Junglewise Threat Intelligence

CVE-2023-32262: Exposure of system-scoped credentials in Jenkins Dimensions Plugin

CVE-2023-32262 · Severity: low · CVSS 3.1 · Published 2023-07-19

Technologies: org.jenkins-ci.plugins:dimensionsscm (Maven). Vendors: Maven.

Executive brief

Exposure of system-scoped credentials in Jenkins Dimensions Plugin

Affected products

Maven org.jenkins-ci.plugins:dimensionsscm

Related threats

Potential leak of credentials in Micro Focus Dimensions CM Jenkins Plugin
Missing permission check in Jenkins Dimensions Plugin allows enumerating credentials IDs