Lucene search

K
osvGoogleOSV:GHSA-RFC8-WRRF-WP3W
HistoryMay 24, 2022 - 4:43 p.m.

Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text

2022-05-2416:43:53
Google
osv.dev
6

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

Jenkins Azure PublisherSettings Credentials Plugin stored the service management certificate unencrypted in credentials.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system.

Azure PublisherSettings Credentials Plugin has been deprecated. Azure PublisherSettings Credentials Plugin 1.5 no longer provides any user features and we recommend the plugin be uninstalled.

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.3%

Related for OSV:GHSA-RFC8-WRRF-WP3W