description: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
affected:
{
defaultStatus: unknown
product: Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.14, status: affected, version: 0, versionType: maven
}