Jenkins Cisco Spark Plugin信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability exists in Jenkins Cisco Spark Plugin version 1.1.1 and earlier, which stems from storing unencrypted, unmarked tokens in the Jenkins controller’s global configuration file, which can be exploited by an attacker to cause sensitive information to be accessed.