Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79875
HistoryMar 17, 2022 - 12:00 a.m.

Jenkins dbCharts Plugin Information Disclosure Vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
2

0.001 Low

EPSS

Percentile

28.6%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins dbCharts Plugin is vulnerable to an information disclosure vulnerability that stems from storing JDBC connection passwords unencrypted in a global configuration file on the Jenkins controller, which an attacker could exploit this vulnerability to view these passwords.

CPENameOperatorVersion
jenkins dbcharts pluginle0.5.2

0.001 Low

EPSS

Percentile

28.6%

Related for CNVD-2022-79875