Lucene search
GitHub Advisory DatabaseGHSA-H5G3-V72X-HC6FHistoryJul 01, 2022 - 12:01 a.m.
Plaintext Storage of a Password in Jenkins Jigomerge Plugin
2022-07-0100:01:08
CWE-256
CWE-522
GitHub Advisory Database
github.com
9
0.001 Low
EPSS
Percentile
28.0%
Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:jigomerge | le | 0.9 |
Related
cnvd
cnvd
Jenkins Jigomerge Plugin信息泄露漏洞
2022-07-04 00:00:00
cve
cve
CVE-2022-34806
2022-06-30 18:15:00
prion
prion
Design/Logic Flaw
2022-06-30 18:15:00
cvelist
cvelist
CVE-2022-34806
2022-06-30 17:48:39
osv
osv
Plaintext Storage of a Password in Jenkins Jigomerge Plugin
2022-07-01 00:01:08
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-06-30)
2023-08-04 00:00:00