Lucene search

K
osvGoogleOSV:GHSA-84P4-7MXC-7PHJ
HistoryMay 13, 2022 - 1:17 a.m.

Jenkins Amazon SNS Build Notifier Plugin stores credentials in plain text

2022-05-1301:17:44
Google
osv.dev
7
jenkins
amazon sns
build notifier
plugin
credentials
unencrypted
global configuration file
security issue

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

65.1%

Jenkins Amazon SNS Build Notifier Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.snsnotify.AmazonSNSNotifier.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system.

AI Score

6.7

Confidence

High

EPSS

0.002

Percentile

65.1%

Related for OSV:GHSA-84P4-7MXC-7PHJ