Junglewise Threat Intelligence

CVE-2023-41941: Missing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDs

CVE-2023-41941 · Severity: low · CVSS 3.1 · Published 2023-09-06

Technologies: org.jenkins-ci.plugins:aws-codecommit-trigger (Maven). Vendors: Maven.

Executive brief

Missing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDs

Affected products

  • Maven org.jenkins-ci.plugins:aws-codecommit-trigger

Related threats