CVE-2023-40345

Summary

CVE-2023-40345 is a vulnerability affecting the Delphix Plugin version 3.0.2 and earlier used in Jenkins. The issue lies in the lack of proper context setting for credentials lookup, enabling attackers with Read permissions to gain unauthorized access to sensitive credentials that they are not entitled to. This vulnerability poses a significant risk to organizations by potentially exposing their Jenkins credentials to unauthorized entities. It is essential to update to the latest plugin version or implement additional security measures to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.