Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/07/01 12:01 a.m.34 views

Plaintext Storage of a Password in Jenkins Elasticsearch Query Plugin

Jenkins Elasticsearch Query Plugin 1.2 and earlier stores a password unencrypted in its global configuration file org.jenkinsci.plugins.elasticsearchquery.ElasticsearchQueryBuilder.xml on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS6.3AI score0.00706EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder