CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller...

CVE-2022-23117

CVE-2022-23117 refers to the Jenkins Conjur Secrets Plugin (versions 1.0.9 and earlier). The description in connected documents states that attackers who can control agent processes can retrieve all username/password credentials stored on the Jenkins controller. The risk is limited to credentials...