org.jenkins-ci.plugins:azure-credentials

Maven3 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.jenkins-ci.plugins:azure-credentialspage 1 of 1

CVE-2023-25766MEDIUMCVSS 4.3EG 4.3✓ Fixed in 254.v64da
2023-02-15
vulnerable: 1.0 ... 4.0.6 (34 versions)
A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2023-25767HIGHCVSS 8.8EG 8.8✓ Fixed in 254.v64da_8176c83a
2023-02-15
vulnerable: 1.0 ... 4.0.6 (34 versions)
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers to connect to an attacker-specified web server.
CVE-2023-25768MEDIUMCVSS 6.5EG 6.5✓ Fixed in 254.v64da_8176c83a
2023-02-15
vulnerable: 1.0 ... 4.0.6 (34 versions)
A missing permission check in Jenkins Azure Credentials Plugin 253.v887e0f9e898b and earlier allows attackers with Overall/Read permission to connect to an attacker-specified web server.

Check whether org.jenkins-ci.plugins:azure-credentials is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.jenkins-ci.plugins:azure-credentials CVEs against the assets you own.

Start Free Scan →