Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:43 a.m.10 views

CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

4.3CVSS6.7AI score0.00323EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:34 a.m.2 views

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

6.5CVSS6.8AI score0.00397EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2023/04/12 6:30 p.m.31 views

Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file org.jenkinsci.plugins.consulkv.GlobalConsulConfig.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with access to the...

4.3CVSS5.3AI score0.00323EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/04/12 6:30 p.m.35 views

GHSA-96C7-FQXV-RMV7 Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file org.jenkinsci.plugins.consulkv.GlobalConsulConfig.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with access to the...

4.3CVSS4.8AI score0.00323EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2023/04/12 6:30 p.m.17 views

Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file org.jenkinsci.plugins.consulkv.GlobalConsulConfig.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with access to the...

6.5CVSS6.6AI score0.00397EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/04/12 6:30 p.m.23 views

GHSA-54CW-RVR3-W6CX Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file org.jenkinsci.plugins.consulkv.GlobalConsulConfig.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with access to the...

4.3CVSS6.6AI score0.00397EPSS
Exploits0References3
NVD
NVD
added 2023/04/12 6:15 p.m.18 views

CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

4.3CVSS4.5AI score0.00323EPSS
Exploits0References2
Prion
Prion
added 2023/04/12 6:15 p.m.19 views

Design/Logic Flaw

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

4CVSS4.5AI score0.00323EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/04/12 6:15 p.m.17 views

Design/Logic Flaw

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

4CVSS6.4AI score0.00397EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/12 5:5 p.m.4 views

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

7AI score0.00397EPSS
Exploits0References2
CVE
CVE
added 2023/04/12 5:5 p.m.50 views

CVE-2023-30531

The CVE-2023-30531 entry concerns Jenkins Consul KV Builder Plugin (versions up to 2.0.13). The token is stored unencrypted in the global configuration file org.jenkinsci.plugins.consulkv.GlobalConsulConfig.xml and is not masked on the global configuration form, enabling users with file-system ac...

6.5CVSS6.4AI score0.00397EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/12 5:5 p.m.16 views

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

6.6AI score0.00397EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/04/12 5:5 p.m.6 views

CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

7AI score0.00323EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/04/12 5:5 p.m.17 views

CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

4.8AI score0.00323EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.4 views

Jenkins Plugin Consul KV Builder 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.1AI score0.00323EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.3 views

Jenkins Plugin Consul KV Builder 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.5AI score0.00397EPSS
Exploits0References4
Rows per page
Query Builder