CVE-2022-34816

The CVE-2022-34816 entry affects the Jenkins HPE Network Virtualization Plugin version 1.0. The vulnerability arises from passwords being stored unencrypted in the plugin’s global configuration on the Jenkins controller, specifically in the configuration file used by the NvEmulationBuilder (org.j...

CVE-2022-34816: Insufficiently Protected Credentials

Jenkins HPE Network Virtualization Plugin 1.0 stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...