Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/06/24 12:00 a.m.•26 views

Encrypted values of secrets in job and agent configurations not redacted by jobConfigHistory

jobConfigHistory 1356.ve360da6c523a and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations through its "View as XML" / "RAW" feature and its configuration diff views. This allows attackers with Item/Extended Read permission but not...

4.3CVSS5.9AI score0.00195EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder