CVE-2023-23848

Vulnerability Description

Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Vulnerability Details

Published Date

February 15, 2023

Last Modified

March 18, 2025

Source

NVD

CVE-2023-23848

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment