CVE-2022-38665

CVE-2022-38665 applies to Jenkins CollabNet Plugins Plugin 2.0.8 and earlier, where the RabbitMQ password is stored unencrypted in the plugin’s global configuration file on the Jenkins controller. This allows users with filesystem access to view the password. Red Hat, OSV, and Nessus records corr...