CVE-2022-20618
Assigner: jenkins
Published: 2022-01-12T19:05:54
State: PUBLISHED
affected: product: Jenkins Bitbucket Branch Source Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 737.vdf9dc06105be
status: affected
version: unspecified
versionType: custom
status: unaffected
version: 725.vd9f8be0fa250
status: unaffected
version: 2.9.11.2
status: unaffected
version: 2.9.7.2
descriptions: value: A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.