Jenkins Azure Service Fabric Plugin
0 remedies
0 remedies
- <= 1.6
Jenkins Azure Service Fabric Plugin Missing Permission Check Vulnerability
Vulnerability
Patched
A vulnerability exists in the Jenkins Azure Service Fabric Plugin in versions through 1.6, where a missing permission check allows attackers with Overall/Read permission to enumerate the IDs of Azure credentials stored in Jenkins. This vulnerability could be exploited to capture these credentials using another vulnerability.
Impact
Exploitation of this vulnerability allows for the enumeration of Azure credential IDs, which could be used to capture the corresponding credentials through another vulnerability.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.7impact
2.5exploitability
4.9remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.