Back to Database
Status published
Unknown
CVE-2023-23848
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and...
Vulnerability Description
Missing permission checks in Synopsys Jenkins Coverity Plugin 3.0.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-23848
Credits & Attribution
No credits recorded in the NVD database.
References
More from Synopsys
View All →CVE-2024-0226
Stored Cross-Site Scripting in Synopsys Seeker
Medium
4.8
CVE-2023-2158
Impersonation through User-Controlled Token
Unknown
0
CVE-2023-23850
A missing permission check in Synopsys Jenkins Coverity Plugin 3.0.2...
Unknown
0
CVE-2023-23849
Versions of Coverity Connect prior to 2022.12.0 are vulnerable to...
Unknown
0
CVE-2023-23847
A cross-site request forgery (CSRF) vulnerability in Synopsys Jenkins Coverity...
Unknown
0
Affected Vendor
Synopsys
View all reports →Affected Software
Synopsys Jenkins Coverity Plugin
Vulnerable Versions:
unspecified
Timeline
Official Publish:
February 15th, 2023
Last Modified:
March 18th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available