PT-2026-68277 · Jenkins · Google Chat Notification Plugin
CVE-2026-70442
·
Published
2026-08-05
·
Updated
2026-08-05
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins Google Chat Notification Plugin versions prior to 166.ve6b de280f2e8
Description
The plugin fails to set the appropriate context for credentials lookup. This allows attackers who possess Item/Configure permissions to access and capture credentials they are not authorized to use.
Recommendations
Update the Jenkins Google Chat Notification Plugin to a version later than 166.ve6b de280f2e8.
Fix
Improper Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chat Notification Plugin