Jenkins: >> Lambdatest-Automation Security Vulnerabilities
A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-10-25
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.
CVSS Score
6.5
EPSS Score
0.0
Published
2023-10-25