Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43419
HistoryOct 19, 2022 - 4:15 p.m.

Design/Logic Flaw

2022-10-1916:15:00
PRIOn knowledge base
www.prio-n.com
2
jenkins
katalon
api keys
unencrypted
config.xml
jenkins controller
access control
file system
nvd

0.001 Low

EPSS

Percentile

28.6%

Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

CPENameOperatorVersion
katalonlt1.0.33

0.001 Low

EPSS

Percentile

28.6%

Related for PRION:CVE-2022-43419