3 matches found
Secrets stored in plain text by rocketchatnotifier
rocketchatnotifier 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file RocketChatNotifier.xml on the Jenkins controller as part of its configuration. These secrets can be viewed by users with access to the Jenkins controller file system. As o...
4.3CVSS5AI score0.00742EPSS
SaveExploits0Affected Software1
20