4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

CVE ID

CVE-2023-30518

GHSA ID

GHSA-4697-3g92-gh78

EPSS Score

0.17077%

CWE

CWE-862

Published

4/12/2023

Updated

4/21/2023

KEV Status

Technology

Java

Basic Information

CVE ID

GHSA ID

EPSS Score

CWE

Published

Updated

KEV Status

Technology

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-30518

CVE-2023-30518: Jenkins Thycotic Secret Server Plugin missing permissions check

Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another vulnerability.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2023-30518

CVE-2023-30518:

4.3

CVSS Score

3.1

-

CVSS Score

Basic Information

CVE ID

CVE-2023-30518

GHSA ID

GHSA-4697-3g92-gh78

EPSS Score

0.17077%

CWE

CWE-862

Published

4/12/2023

Updated

4/21/2023

KEV Status

Technology

Java

Basic Information

CVE ID

GHSA ID

EPSS Score

CWE

Published

Updated

KEV Status

Technology

Technical Details

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
io.jenkins.plugins:thycotic-secret-server	maven	<= 1.0.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability explicitly involves an unauthenticated HTTP endpoint for credential ID enumeration. In Jenkins plugin architecture:

Credential providers typically implement specific methods for credential management
HTTP endpoints are usually handled via Stapler routing or WebMethod annotations
The missing permission check strongly suggests an absence of Jenkins.get().checkPermission() or similar authorization calls
The credentials ID enumeration capability aligns with a GET handler method returning credential references While exact code isn't available, the pattern matches Jenkins vulnerability patterns for CWE-862 where endpoints lack requirePermission checks.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

4.3

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2023-30518: Jenkins Thycotic Secret Server Plugin missing permissions check

CVE-2023-30518:

4.3

-

Basic Information

Basic Information

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

CVE-2023-30518: Jenkins Thycotic Secret Server Plugin missing permissions check

4.3

4.3

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI