CVE-2023-40347

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with…

published August 16, 2023

CVSS
—
EPSS
1%
Percentile
51.5
In the wild
Unconfirmed
What it is

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00672 · 51.5th percentile
Published
2023-08-16T14:32Z
EPSS history
Timeline
  • 16 AUG 14:32Z
    Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with…
    cvelistv5