CVE-2023-24425

Published: Jan 24, 2023

Modified: Apr 2, 2025

PUBLISHED

Description

Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.

Vendor	Product	Versions
Jenkins Project	Jenkins Kubernetes Credentials Provider Plugin	affected `unspecified - <= 1.208.v128ee9800c04`

References

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3022

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-24425

Description

Affected Products

References