CVE-2026-57299: Medium severity Contrast Security Jenkins Contrast Continuous Application Security Plugin vulnerability
Missing permission checks in Jenkins Contrast Continuous Application Security Plugin 3.11 and earlier allow attackers with Overall/Read permission to enumerate the names of configured Contrast metadata.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57299?
CVE-2026-57299 has a severity score of 18, indicating a critical risk level.
How do I fix CVE-2026-57299?
To fix CVE-2026-57299, upgrade to Jenkins Contrast Continuous Application Security Plugin version 3.12 or later.
What are the implications of CVE-2026-57299?
CVE-2026-57299 allows attackers with Overall/Read permission to enumerate configured Contrast metadata, compromising sensitive information.
Who is affected by CVE-2026-57299?
Users of Jenkins Contrast Continuous Application Security Plugin versions 3.11 and earlier are affected by CVE-2026-57299.
What should I do if I cannot immediately update for CVE-2026-57299?
If an immediate update is not possible for CVE-2026-57299, consider restricting access to users with Overall/Read permission until you can upgrade.