PT-2026-44019
CVE-2026-48926
·
Published
2026-05-27
·
Updated
2026-05-27
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins Job Import Plugin versions prior to 143.v044a 2e819b 27
Description
A missing permission check in an HTTP endpoint allows users with Overall/Read permissions to enumerate the IDs of credentials stored within Jenkins.
Recommendations
Update the plugin to a version later than 143.v044a 2e819b 27.
Found an issue in the description? Have something to add? Feel free to write us 👾