Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-70435
created 1 month ago Activity log
  • Created & dismissed (no matching packages found) suggestion 1 month ago
A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and …

A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

References

Affected products

Jenkins SCM-Manager Plugin
  • =<1.11.1