A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Thu, 06 Aug 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Read‑Only Access Allows Credential Exfiltration in Jenkins SCM-Manager Plugin |
Thu, 06 Aug 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Missing Permission Check Enables Credential Capture via SCM-Manager Plugin | |
| Weaknesses | CWE-284 |
Thu, 06 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-862 | |
| Metrics |
cvssV3_1
|
Wed, 05 Aug 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Missing Permission Check Enables Credential Capture via SCM-Manager Plugin | |
| Weaknesses | CWE-284 |
Wed, 05 Aug 2026 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: jenkins
Published: 2026-08-05T17:40:33.247Z
Updated: 2026-08-06T14:57:47.318Z
Reserved: 2026-08-04T14:13:20.602Z
Link: CVE-2026-70435
Vulnrichment
Updated: 2026-08-06T14:57:30.787Z
NVD
No data.
Redhat
No data.