Vulnerability in Jenkins Project Hcl Appscan Plugin
CVE-2026-70433
Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected products
- Jenkins Project Hcl Appscan Plugin — versions 0
References
- jenkinsci-cert@googlegroups.com (vendor-advisory)