description: A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
affected:
{
defaultStatus: unaffected
product: Jenkins Azure VM Agents Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 852.v8d35f0960a_43, status: affected, version: 0, versionType: maven
}