CVE-2023-24440

2023-01-2400:00:00

jenkins

www.cve.org

jenkins

jira

pipeline steps plugin

private key

plain text

exposure

EPSS

Percentile

13.2%

JSON

Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CNA Affected

[
  {
    "product": "Jenkins JIRA Pipeline Steps Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "2.0.165.v8846cf59f3db",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unknown",
        "version": "next of 2.0.165.v8846cf59f3db",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774

EPSS

Percentile

13.2%

JSON

Related for CVELIST:CVE-2023-24440