Credential Access Vulnerability in Jenkins mabl Plugin by Jenkins

CVE-2023-37951

Summary

The mabl Plugin for Jenkins, specifically versions 0.0.46 and earlier, does not implement proper context for credential lookup. This vulnerability can be exploited by attackers possessing Item/Configure permissions, which allows them to gain unauthorized access to sensitive credentials. Following exploits, malicious actors can capture and exploit these credentials to compromise the security of affected systems. It is crucial for Jenkins users to review the security advisory and ensure that they are using updated versions of this plugin.

References