{"id":"CVE-2023-3442","aliases":["GHSA-cj2x-r74q-vcx9"],"url":"https://o3.security/vulnerability/CVE-2023-3442","summary":"Missing Authorization in Jenkins plug-in for ServiceNow DevOps","details":"A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 that, if exploited successfully, could cause the unwanted exposure of sensitive information. To address this issue, apply the 1.38.1 version of the Jenkins plug-in for ServiceNow DevOps on your Jenkins server.  No changes are required on your instances of the Now Platform. \n","published":"2023-07-26T18:32:19.787Z","modified":"2026-08-12T03:51:42.473100049Z","cvss":{"score":7.7,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"io.jenkins.plugins:servicenow-devops","fixedVersion":"1.38.1"}],"fix":{"url":"https://github.com/jenkinsci/servicenow-devops-plugin/commit/67192e24099787ad732b41d581f20714d4253921","label":"jenkinsci/servicenow-devops-plugin@67192e2"},"references":[{"type":"WEB","url":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1434119"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3442.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3442"},{"type":"PACKAGE","url":"https://github.com/jenkinsci/servicenow-devops-plugin"},{"type":"WEB","url":"https://github.com/jenkinsci/servicenow-devops-plugin/commit/67192e24099787ad732b41d581f20714d4253921"},{"type":"WEB","url":"https://github.com/jenkinsci/servicenow-devops-plugin/commit/d7d2422b016995402dd245d9c9c5c2f4cf00c691"},{"type":"WEB","url":"https://github.com/jenkinsci/servicenow-devops-plugin/releases/tag/v1.38.1"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:42.473100049Z"}}