CVE-2024-39459

A vulnerability was found in the Jenkins Plain Credentials Plugin, which stores secret file credentials unencrypted only Base64 encoded on the Jenkins controller file system. Users with access to the Jenkins controller file system global credentials or with Item/Extended Read permission...

io.fabric8.jenkins.plugins:openshift-sync (>=1.0.43, <=1.0.45), io.jenkins.plugins:probely-security (1.0.1) potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.5)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - io.fabric8.jenkins.plugins:openshift-sync =1.0.43, =1.0.45 -...

au.com.versent.jenkins.plugins:ignore-committer-strategy (29.v7c3891a_434c3), com.cloudbees.jenkins.plugins:amazon-ecr (1.151.vb_ca_71ddd0b_cf) +24 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (179.vc5cb_98f6db_38)

org.jenkins-ci.plugins:plain-credentials MAVEN version 179.vc5cb98f6db38 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (1.7)

org.jenkins-ci.plugins:plain-credentials MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves: CVE-2024-39459...