Lucene search
PRIOn knowledge basePRION:CVE-2023-50776HistoryDec 13, 2023 - 6:15 p.m.
Authentication flaw
2023-12-1318:15:00
PRIOn knowledge base
www.prio-n.com
3
jenkins
paaslane
authentication
tokens
unencrypted
job config
file system
security
Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| paaslane_estimate | le | 1.0.4 |
Related
cvelist
cvelist
CVE-2023-50776
2023-12-13 17:30:21
nvd
nvd
CVE-2023-50776
2023-12-13 18:15:44
github
github
Tokens stored in plain text by PaaSLane Estimate Plugin
2023-12-13 18:31:04
osv
osv
Tokens stored in plain text by PaaSLane Estimate Plugin
2023-12-13 18:31:04
cve
cve
CVE-2023-50776
2023-12-13 18:15:44
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-12-13)
2023-12-14 00:00:00