Container Scanning Connector

container_scanning_connector

Vendor: Qualys • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2023-4777

1Qualys

1Container Scanning Connector

Nov 21, 2024

Sep 8, 2023

N/A· v4

4.3 MEDIUM· v3

N/A· v2

An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credentials IDs of credentials stored in Jenkins and to connect to an attacker-specified URL using attacker-specified credentials IDs, capturing credentials stored in Jenkins. Show less