Description
Missing permission checks in Jenkins Ansible Plugin 1.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Remediation
References
https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1943
Related Vulnerabilities
CVE-2021-20328 Vulnerability in maven package org.mongodb:mongodb-driver-sync
CVE-2023-26480 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livedata-webjar
CVE-2019-8331 Vulnerability in maven package org.webjars.bowergithub.jasny:bootstrap
CVE-2016-0793 Vulnerability in maven package org.wildfly:wildfly-undertow
CVE-2019-10280 Vulnerability in maven package org.jenkins-ci.plugins:assembla-auth