← CVE Intelligence

CVE-2022-25190

Jenkins project / Jenkins Conjur Secrets Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Conjur Secrets Pluginaffected unspecified through 1.0.11

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.