Description (CNA)
Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain information about artifacts uploaded to S3, if the optional Run/Artifacts permission is enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins project / Jenkins S3 publisher Plugin | affected unspecified through 0.11.6; unaffected 0.11.5.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.