VYPR

Maven package

io.jenkins.plugins/thycotic-secret-server

pkg:maven/io.jenkins.plugins/thycotic-secret-server

Vulnerabilities (1)

  • CVE-2023-30518Apr 12, 2023
    affected <= 1.0.2

    A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.