CVE-2022-34796

Summary

A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Deployment Dashboard Pluginunspecified <= 1.0.10affected
Jenkins projectJenkins Deployment Dashboard Pluginnext of 1.0.10 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References