Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration
https://portal.perforce.com/s/detail/a91PA000001STsvYAG
https://github.com/Blazemeter/blazemeter-jenkins-plugin/commit/11ec94f68136a0612ae1b37b5370053132cb2528
Source: Mitre, NVD
Published: 2024-04-17
Updated: 2024-04-17
Base Score: 4
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N
Severity: Medium
Base Score: 4.3
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N