| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:teamconcert | ≤ 1.3.0 | |
| team concert | ≤ 1.3.0 |
A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free