Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-24433

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gmhf-37fx-c4q8

Missing permission checks in Jenkins Orka Plugin allow capturing credentials Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

gitlab/maven/io.jenkins.plugins/macstadium-orka/CVE-2023-24433

Missing permission checks in Jenkins Orka Plugin allow capturing credentials Missing permission checks in Jenkins Orka by MacStadium Plugin 1.31 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.