PT-2026-51809

CVE-2026-57299

Published

2026-06-24

Updated

2026-07-06

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jenkins Contrast Continuous Application Security Plugin versions prior to 3.12

Description Missing permission checks allow users with Overall/Read permission to enumerate the names of configured Contrast metadata.

Recommendations Update Jenkins Contrast Continuous Application Security Plugin to version 3.12 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-8263-QV4G-VFXR

Found an issue in the description? Have something to add? Feel free to write us 👾