description: Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
affected:
{
vendor: Jenkins Project
product: Jenkins Jira Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 3.11, status: affected
defaultStatus: unaffected
}