CVE Catalog
CVE-2023-40344
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.52%
40th percentile - higher than 40% of all known CVEs
Summary
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Risk Assessment
Attackers can gain access to sensitive credential IDs, potentially leading to further attacks on the organization's systems and data.
Recommendation
It is recommended to update the Delphix plugin to the latest version to patch the security vulnerability and review user permissions in Jenkins.
Original NVD description (English source)
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.