Lucene search
GoogleOSV:GHSA-757G-M98V-6R49HistoryMay 24, 2022 - 4:58 p.m.
Jenkins Sofy.AI Plugin stores API token in plain text
2022-05-2416:58:49
Google
osv.dev
3
Jenkins Sofy.AI Plugin stores an API token unencrypted in job config.xml files on the Jenkins controller. This token can be viewed by users with Extended Read permission or access to the Jenkins controller file system.
As of publication of this advisory there is no fix.
| CPE | Name | Operator | Version |
|---|---|---|---|
| io.jenkins.plugins:sofy-ai | eq | 1.0.0 | |
| io.jenkins.plugins:sofy-ai | eq | 1.0.1 | |
| io.jenkins.plugins:sofy-ai | eq | 1.0.3 |
Related
cve
cve
CVE-2019-10447
2019-10-16 14:15:12
cvelist
cvelist
CVE-2019-10447
2019-10-16 13:00:49
prion
prion
Design/Logic Flaw
2019-10-16 14:15:00
github
github
Jenkins Sofy.AI Plugin stores API token in plain text
2022-05-24 16:58:49
osv
osv
CVE-2019-10447
2019-10-16 14:15:12
nvd
nvd
CVE-2019-10447
2019-10-16 14:15:12