Lucene search
GoogleOSV:GHSA-656G-HF8V-X2RWHistoryMay 24, 2022 - 5:22 p.m.
Secret stored in plain text by Jenkins Slack Upload Plugin
2022-05-2417:22:19
Google
osv.dev
16
jenkins
slack upload
plugin
plain text
secret
config.xml
unencrypted
security breach
EPSS
0.001
Percentile
22.0%
Jenkins Slack Upload Plugin 1.7 and earlier stores a secret unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.
Related
cvelist
cvelist
CVE-2020-2208
2020-07-02 14:55:35
nvd
nvd
CVE-2020-2208
2020-07-02 15:15:17
cve
cve
CVE-2020-2208
2020-07-02 15:15:17
github
github
Secret stored in plain text by Jenkins Slack Upload Plugin
2022-05-24 17:22:19
prion
prion
Design/Logic Flaw
2020-07-02 15:15:00
osv
osv
CVE-2020-2208
2020-07-02 15:15:17