Vulnerabilities > Jenkins > Team Concert > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-06-19 CVE-2023-3315 Missing Authorization vulnerability in Jenkins Team Concert
Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
network
low complexity
jenkins CWE-862
4.3
2019-12-17 CVE-2019-16567 Missing Authorization vulnerability in Jenkins Team Concert
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
network
low complexity
jenkins CWE-862
4.3
2019-12-17 CVE-2019-16566 Missing Authorization vulnerability in Jenkins Team Concert
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
network
low complexity
jenkins CWE-862
6.5