Jenkins Contrast Continuous Application Security vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Contrast Continuous Application Security: 2 record(s), with affected versions and fixes.cpe:2.3:a:jenkins:contrast_continuous_application_security
CVE-2026-57299
Medium · 4.3
CWE-862 Jun 24, 2026
Missing Authorization in Jenkins Contrast Continuous Application Security
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
CVE-2026-57297
Medium · 4.3
CWE-862 Jun 24, 2026
Missing Authorization in Jenkins Contrast Continuous Application Security
A missing permission check in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using an attacker-specified username, API key, and service key.