A cross-site request forgery (CSRF) vulnerability in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: OpenText
Published: 2023-08-21T22:34:37.786Z
Updated: 2024-08-02T07:24:04.610Z
Reserved: 2023-08-10T21:30:57.020Z
Link: CVE-2023-4301
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-08-21T23:15:09.107
Modified: 2023-08-24T21:36:21.440
Link: CVE-2023-4301
Redhat
No data.