Threats tagged 'ghsa-f696-867g-2759'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.2	EPSS 0.2%	CVE-2025-58460Io.jenkins.plugins:opentelemetry: Jenkins OpenTelemetry Plugin missing permission check allows capturing credentials Medium4.2EPSS 0.2%2025-09-03GCVE DatabaseCVE-2025-58460 Jenkins OpenTelemetry Plugin versions 3.1543.v8446b_92b_cd64 and earlier contain a missing permission check vulnerability. This flaw allows users with Overall/Read permission to connect to attacker-specified URLs using credentials IDs that the attacker has obtained by other means, potentially capturing stored Jenkins credentials. A fix is available in version 3.1543.1545.vf5a. EPSS 0.2%Report on CVE-2025-58460 Vulnerability CWE-862 #ghsa-f696-867g-2759 #maven	GCVE Database	2025-09-03

Page 1 of 1