An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and earlier in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hipchat | Atlassian | * | 2.2.0 (including) |