Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Lambdatest-automation
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-46652 1 Jenkins 1 Lambdatest-automation 2023-12-10 N/A 4.3 MEDIUM
A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of LAMBDATEST credentials stored in Jenkins.
CVE-2023-46653 1 Jenkins 1 Lambdatest-automation 2023-12-10 N/A 6.5 MEDIUM
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, potentially resulting in its exposure.