Lucene search

K
osvGoogleOSV:GHSA-FFJ8-W4RJ-VR7V
HistoryMay 13, 2022 - 1:15 a.m.

ECS Publisher Plugin stored and displayed API token in plain text

2022-05-1301:15:08
Google
osv.dev
4

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this plugin’s configuration.

CPENameOperatorVersion
de.eacg:ecs-publishereq1.0.0

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

Related for OSV:GHSA-FFJ8-W4RJ-VR7V