PT-2026-68277
CVE-2026-70442
·
Published
2026-08-05
·
Updated
2026-08-05
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Jenkins Google Chat Notification Plugin versions prior to 166.ve6b de280f2e8
Description
The plugin fails to set the appropriate context for credentials lookup. This allows attackers who possess Item/Configure permissions to access and capture credentials they are not authorized to use.
Recommendations
Update the Jenkins Google Chat Notification Plugin to a version later than 166.ve6b de280f2e8.
Found an issue in the description? Have something to add? Feel free to write us 👾