Vulnerabilities > Jenkins > Thycotic Secret Server
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-04-12 | CVE-2023-30518 | Missing Authorization vulnerability in Jenkins Thycotic Secret Server 1.0.0/1.0.1/1.0.2 A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. | 4.3 |