1 matches found
Secret stored in plain text by Parameterized-Remote-Trigger
Parameterized-Remote-Trigger 3.1.3 and earlier stores a secret unencrypted in its global configuration file org.jenkinsci.plugins.ParameterizedRemoteTrigger.RemoteBuildConfiguration.xml on the Jenkins controller as part of its configuration. This secret can be viewed by attackers with access to t...
4.3CVSS5.1AI score0.00524EPSS
SaveExploits0Affected Software1
20