CVE-2026-70445

Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate…

jenkins·Published 2026-08-05

CVSS

—

EPSS

—

KEV

Exploits

Vendor statements (1)

jenkins.io

cve.orgen

184 chars

Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.