Security Advisory

CVE-2020-2118

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-12 14:35:44
Last updated 2024-08-04 07:01:40
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.