CVE-2023-40345

—

CVSS 3.1

6.5 medium

EPSS

<1%p59

Published

Aug 16, 2023 (Aug 16, 2023)

Modified

Jun 17, 2026

Description

Jenkins Delphix Plugin 3.0.2 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Overall/Read permission to access and capture credentials they are not entitled to.

Vendors: jenkins
Products: delphix
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.