Insecure temporary file usage in Jenkins Git Client Plugin

2022-05-1700:21:58

Google

osv.dev

0.0004 Low

EPSS

Percentile

12.7%

JSON

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure

CPENameOperatorVersion
org.jenkins-ci.plugins:git-clienteq1.13.0
org.jenkins-ci.plugins:git-clienteq1.14.1
org.jenkins-ci.plugins:git-clienteq1.21.0
org.jenkins-ci.plugins:git-clienteq2.0.0
org.jenkins-ci.plugins:git-clienteq1.19.3
org.jenkins-ci.plugins:git-clienteq1.0.5
org.jenkins-ci.plugins:git-clienteq1.16.1
org.jenkins-ci.plugins:git-clienteq1.17.0
org.jenkins-ci.plugins:git-clienteq1.8.1
org.jenkins-ci.plugins:git-clienteq1.10.2

Name	Operator	Version
org.jenkins-ci.plugins:git-client	eq	1.13.0
org.jenkins-ci.plugins:git-client	eq	1.14.1
org.jenkins-ci.plugins:git-client	eq	1.21.0
org.jenkins-ci.plugins:git-client	eq	2.0.0
org.jenkins-ci.plugins:git-client	eq	1.19.3
org.jenkins-ci.plugins:git-client	eq	1.0.5
org.jenkins-ci.plugins:git-client	eq	1.16.1
org.jenkins-ci.plugins:git-client	eq	1.17.0
org.jenkins-ci.plugins:git-client	eq	1.8.1
org.jenkins-ci.plugins:git-client	eq	1.10.2