Vulnerabilities > Jenkins > Jira > 3.11
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-11-29 | CVE-2023-49653 | Insufficiently Protected Credentials vulnerability in Jenkins Jira Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. | 6.5 |