Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79940
HistoryApr 13, 2022 - 12:00 a.m.

Jenkins Google Compute Engine Plugin has an unspecified vulnerability

2022-04-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

22.0%

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.A security vulnerability exists in the Jenkins Google Compute Engine Plugin, which stems from storing unencrypted private keys in the cloud agent config.xml file on the Jenkins controller, which could be exploited by an attacker with extended read access to view these private keys or access the Jenkins controller file system.

0.001 Low

EPSS

Percentile

22.0%