← CVE Intelligence

CVE-2023-2196

Missing permission checks in Code Dx Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system.

Affected (CNA)

Vendor / productVersions
Jenkins / Jenkins Code Dx Pluginaffected 0 through 3.1.0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.