← CVE Intelligence

CVE-2025-24397

Jenkins Project / Jenkins GitLab Plugin PUBLISHED

Description (CNA)

An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins GitLab Pluginaffected 0 through 1.9.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.