Lucene search
PRIOn knowledge basePRION:CVE-2022-27206HistoryMar 15, 2022 - 5:15 p.m.
Design/Logic Flaw
2022-03-1517:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
28.5%
Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab_authentication | le | 1.13 |
Related
osv
osv
CVE-2022-27206
2022-03-15 17:15:11
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
2022-03-16 00:00:43
cve
cve
CVE-2022-27206
2022-03-15 17:15:11
cnvd
cnvd
Jenkins GitLab Authentication Plugin Information Disclosure Vulnerability
2022-03-17 00:00:00
cvelist
cvelist
CVE-2022-27206
2022-03-15 16:45:53
github
github
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
2022-03-16 00:00:43
nvd
nvd
CVE-2022-27206
2022-03-15 17:15:11
