CVE-2023-43501

MEDIUM · CVSS 6.5 EPSS 0.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-43501

Severity

MEDIUM

CVSS

6.5

EPSS

0.50%

Jenkins

Original NVD Description

A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.