Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.15 Multiple Vulnerabilities (CloudBees Security Advisory 2023-04-12)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.346.x prior to 2.346.40.0.15. It is, therefore, affected by multiple vulnerabilities including the following: - Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask i.e....

CVE-2023-30524

CVE-2023-30524 affects Jenkins' Report Portal Plugin 0.5 and earlier. The vulnerability stems from tokens being stored in plaintext in job config.xml on the Jenkins controller and from the configuration form not masking those tokens, enabling users with certain permissions or access to the filesy...

CVE-2023-30524

Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them...