Vulnerabilities > Jenkins > Delphix > 3.0.1

DATE CVE VULNERABILITY TITLE RISK
2023-08-16 CVE-2023-40344 Missing Authorization vulnerability in Jenkins Delphix
A missing permission check in Jenkins Delphix Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
network
low complexity
jenkins CWE-862
4.3
4.3
2023-08-16 CVE-2023-40345 Insufficiently Protected Credentials vulnerability in Jenkins Delphix
Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.
network
low complexity
jenkins CWE-522
6.5
6.5