CVE-2024-28155
Assigner: jenkins
Published: 2024-03-06T17:01:58.080Z
State: PUBLISHED
affected: vendor: Jenkins Project
product: Jenkins AppSpider Plugin
versions: version: 0
versionType: maven
lessThanOrEqual: 1.0.16
status: affected
defaultStatus: unaffected
descriptions: value: Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names.