Access key stored in plain text by Jenkins Metrics Plugin

🗓️ 13 Jan 2022 00:57:00Reported by GitHub Advisory DatabaseType

Access key stored in plain text by Jenkins Metrics Plugin 4.0.2.8 and earlie

Reporter	Title	Published	Views	Family All 12
Prion	Design/Logic Flaw	12 Jan 202220:15	–	prion
Cvelist	CVE-2022-20621	12 Jan 202219:06	–	cvelist
CVE	CVE-2022-20621	12 Jan 202220:15	–	cve
OSV	CVE-2022-20621	12 Jan 202220:15	–	osv
OSV	Access key stored in plain text by Jenkins Metrics Plugin	13 Jan 202200:00	–	osv
AlpineLinux	CVE-2022-20621	12 Jan 202220:15	–	alpinelinux
RedhatCVE	CVE-2022-20621	24 Jan 202218:05	–	redhatcve
CNVD	Jenkins Metrics Plugin Licensing Issue Vulnerability	16 Jan 202200:00	–	cnvd
NVD	CVE-2022-20621	12 Jan 202220:15	–	nvd
Tenable Nessus	Jenkins LTS < 2.319.2 / Jenkins weekly < 2.330 Multiple Vulnerabilities	21 Jan 202200:00	–	nessus

Vulners

Node

org.jenkins\-ci.plugins metricsRange<4.0.2.7.1

org.jenkins\-ci.plugins metrics

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-20621
jenkins	www.jenkins.io/security/advisory/2022-01-12/
openwall	www.openwall.com/lists/oss-security/2022/01/12/6
github	www.github.com/jenkinsci/metrics-plugin/commit/9810480370d4c5e04a2b710934db5461bde0d1b6
github	www.github.com/advisories/GHSA-gg9m-x3cg-69vh

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jan 2022 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS22.1

CVSS35.5

EPSS0.00124

CWE-522