PT-2026-93773 · Jenkins · Pipeline: Multibranch Plugin
CVE-2026-92130
·
Published
2026-09-16
·
Updated
2026-09-16
CVSS v3.1
3.1
Low
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins Pipeline: Multibranch Plugin versions prior to 841.vec5b 9e1806ec
Description
An issue exists in the
resolveScm Pipeline step where the appropriate context for credentials lookup is not set. This allows users with Item/Configure permissions to access and capture credentials they are not authorized to use.Recommendations
Update Jenkins Pipeline: Multibranch Plugin to a version later than 841.vec5b 9e1806ec.
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pipeline: Multibranch Plugin