CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Jenkins, Kubernetes.
CVE
CVE-2023-24425
Severity
MEDIUM
CVSS
6.5
EPSS
0.82%
Jenkins Kubernetes
Original NVD Description
Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to.
Related CVEs
Other vulnerabilities affecting the same vendor(s)