CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-30518

A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.9%

CVSS Severity

CVSS v3 Score 4.3

References

http://www.openwall.com/lists/oss-security/2023/04/13/3
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837
http://www.openwall.com/lists/oss-security/2023/04/13/3
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2837

Products affected by CVE-2023-30518

Jenkins » Thycotic Secret Server » Version: N/A

cpe:2.3:a:jenkins:thycotic_secret_server:-
Jenkins » Thycotic Secret Server » Version: 1.0.0

cpe:2.3:a:jenkins:thycotic_secret_server:1.0.0
Jenkins » Thycotic Secret Server » Version: 1.0.1

cpe:2.3:a:jenkins:thycotic_secret_server:1.0.1
Jenkins » Thycotic Secret Server » Version: 1.0.2

cpe:2.3:a:jenkins:thycotic_secret_server:1.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-30518

Products

Pricing

Contact Us