SCM-Manager Plugin

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2026-70435	Jenkins Project SCM-Manager Plugin	Med	0.27	4.2	0.00		Aug 5, 2026	A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2026-70434	Jenkins Project SCM-Manager Plugin	Med	0.27	4.2	0.00		Aug 5, 2026	A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CVE-2026-70435MedAug 5, 2026
Jenkins Project
SCM-Manager Plugin
risk 0.27cvss 4.2epss 0.00
A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2026-70434MedAug 5, 2026
Jenkins Project
SCM-Manager Plugin
risk 0.27cvss 4.2epss 0.00
A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.