CVE-2023-37951: Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowin...

Security readout for executives and security teams

Jenkins instances using mabl Plugin 0.0.46 or earlier may let a user who can configure a Jenkins item capture credentials they should not access. The issue is plugin-specific and requires Item/Configure permission, but exposed Jenkins credentials can create broader business risk if reused or privileged. Exposure is limited to Jenkins environments with the mabl Plugin installed at version 0.0.46 or earlier, especially where non-administrators have Item/Configure permission on jobs or folders. Treat this as a targeted Jenkins credential exposure risk. Prioritize remediation where Jenkins stores production, deployment, cloud, or third-party credentials and where job configuration rights are broadly delegated. Mitigation focus: Inventory Jenkins controllers for the mabl Plugin and identify versions 0.0.46 or earlier.; Check Jenkins vendor guidance for an available fixed version or recommended workaround.; Disable or uninstall the plugin if it is not operationally required..

Prepared

Jun 2, 2026, 01:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.