Jenkins Publish to Bitbucket Plugin Missing Permission Check Vulnerability

A vulnerability exists in the Jenkins Publish to Bitbucket Plugin in versions through 0.4, where a missing permission check allows users with Overall/Read permission to enumerate the IDs of credentials stored in Jenkins. This vulnerability could be exploited to capture these credentials using another vulnerability that targets the same plugin.

Impact

Exploitation of this vulnerability allows for the enumeration of credentials IDs, which can be used to capture credentials through another vulnerability in the same plugin.