Lucene search
+L

2 matches found

OSV
OSV
added 2022/05/13 1:48 a.m.14 views

GHSA-5GWQ-4275-Q4QC Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials

Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file access. This vulnerability appears to ha...

7.8CVSS7.5AI score0.00339EPSS
SaveExploits0References3
Rows per page
Query Builder