Lucene search
GoogleOSV:GHSA-8GQ4-X72R-6XCRHistoryMay 24, 2022 - 4:56 p.m.
Jenkins Google Calendar Plugin has Insufficiently Protected Credentials
2022-05-2416:56:47
Google
osv.dev
5
0.001 Low
EPSS
Percentile
28.6%
Google Calendar Plugin stores a calendar password unencrypted in job config.xml files on the Jenkins controller. This password can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
Related
cvelist
cvelist
CVE-2019-10425
2019-09-25 15:05:34
cve
cve
CVE-2019-10425
2019-09-25 16:15:11
nvd
nvd
CVE-2019-10425
2019-09-25 16:15:11
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00
github
github
Jenkins Google Calendar Plugin has Insufficiently Protected Credentials
2022-05-24 16:56:47