CVE-2023-40344

Summary

CVE-2023-40344 is a vulnerability affecting the Jenkins Delphix Plugin version 3.0.2 and earlier. This issue involves a missing permission check, which grants attackers with Overall/Read access to enumerate the IDs of credentials stored within Jenkins. Unauthorized access to these credentials could lead to potentially serious security consequences, making it important for users to update their plugins to a secure version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.