description: A missing permission check in Jenkins Google Kubernetes Engine Plugin 0.7.0 and earlier allowed attackers with Overall/Read permission to obtain limited information about the scope of a credential with an attacker-specified credentials ID.
affected:
{
product: Jenkins Google Kubernetes Engine Plugin
vendor: Jenkins project
versions:
status: affected, version: 0.7.0 and earlier
}