Lucene search
PRIOn knowledge basePRION:CVE-2023-2632HistoryMay 16, 2023 - 6:15 p.m.
Design/Logic Flaw
2023-05-1618:15:00
PRIOn knowledge base
www.prio-n.com
4
design flaw
logic flaw
code dx plugin
api keys
unencrypted storage
jenkins controller
file system access
Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Related
alpinelinux
alpinelinux
CVE-2023-2632
2023-05-16 18:15:17
cve
cve
CVE-2023-2632
2023-05-16 18:15:17
cvelist
cvelist
CVE-2023-2632 API keys stored and displayed in plain text by Code Dx Plugin
2023-05-16 17:54:11
veracode
veracode
Information Disclosure
2023-05-30 07:35:43
nvd
nvd
CVE-2023-2632
2023-05-16 18:15:17
github
github
Jenkins Code Dx Plugin stores API keys in plain text
2023-05-16 18:30:16
osv
osv
Jenkins Code Dx Plugin stores API keys in plain text
2023-05-16 18:30:16
