1 matches found
Keys stored in plain text by jira-steps
jira-steps 2.0.165.v8846cf59f3db and earlier stores the private key unencrypted in its global configuration file org.thoughtslive.jenkins.plugins.jira.JiraStepsConfig.xml on the Jenkins controller as part of its configuration. This key can be viewed by users with access to the Jenkins controller...
5.5CVSS5.6AI score0.00203EPSS
SaveExploits0Affected Software1
20