CVE-2022-43419

2022-10-1900:00:00

jenkins

www.cve.org

jenkins

katalon plugin

api keys

unencrypted

job config files

extended read permission

file system access

0.001 Low

EPSS

Percentile

28.6%

JSON

Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

CNA Affected

[
  {
    "product": "Jenkins Katalon Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "1.0.32",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]