Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54928
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Proxmox Plugin Information Disclosure Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
jenkins
proxmox
information disclosure
vulnerability
global config.xml file
passwords

EPSS

0.001

Percentile

28.4%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Proxmox Plugin 0.5.0 and earlier versions are vulnerable to an information disclosure vulnerability that stems from the plugin storing unencrypted Proxmox data center passwords in the global config.xml file on the Jenkins controller, and an attacker with access to the Jenkins controller file system could exploit the vulnerability to view that password in that file.

EPSS

0.001

Percentile

28.4%

Related for CNVD-2022-54928