Lucene search

K
osvGoogleOSV:GHSA-8486-H39X-CX2F
HistoryMay 13, 2022 - 1:48 a.m.

Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials

2022-05-1301:48:39
Google
osv.dev
8

0.001 Low

EPSS

Percentile

42.8%

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in DataBoundConfigurator.java, Attribute.java, BaseConfigurator.java, ExtensionConfigurator.java that allows attackers with access to Jenkins log files to obtain the passwords configured using Configuration as Code Plugin.

0.001 Low

EPSS

Percentile

42.8%

Related for OSV:GHSA-8486-H39X-CX2F