Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-76981
HistoryJun 17, 2022 - 12:00 a.m.

Rundeck plaintext storage vulnerability

2022-06-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
rundeck
plaintext storage
vulnerability
versions 4.2.0
versions 4.2.1
key storage converter
cryptographic layer
cnvd

EPSS

0.001

Percentile

40.3%

Rundeck is an open source automation service with a Web console, command line tools and WebAPI from Rundeck, Inc. that is primarily used to run automation tasks. versions 4.2.0 and 4.2.1 of Rundeck contain a plaintext storage vulnerability that stems from not properly enabling the Key Storage Converter plug-in mechanism, which could be exploited by an attacker to cause the key The cryptographic layer of the storage does not work properly.

EPSS

0.001

Percentile

40.3%