Lucene search
GoogleOSV:GHSA-JP8R-JH5J-CGWFHistoryMay 24, 2022 - 4:56 p.m.
Jenkins CodeScan Plugin has Insufficiently Protected Credentials
2022-05-2416:56:46
Google
osv.dev
7
0.0004 Low
EPSS
Percentile
12.7%
CodeScan Plugin stores an API key unencrypted in its global configuration file com.villagechief.codescan.jenkins.CodeScanBuilder.xml on the Jenkins controller. This API key can be viewed by users with access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.villagechief.codescan.jenkins:codescan | eq | 1.0 |
Related
nvd
nvd
CVE-2019-10423
2019-09-25 16:15:11
github
github
Jenkins CodeScan Plugin has Insufficiently Protected Credentials
2022-05-24 16:56:46
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00
cvelist
cvelist
CVE-2019-10423
2019-09-25 15:05:33
cve
cve
CVE-2019-10423
2019-09-25 16:15:11