1 matches found
API key displayed without masking by zohoqengine
zohoqengine stores the QEngine API Key in job config.xml files on the Jenkins controller as part of its configuration. While this key is stored encrypted on disk, in zohoqengine 1.0.29.vfacc23396502 and earlier the job configuration form does not mask the QEngine API Key form field, increasing th...
3.1CVSS5.2AI score0.00277EPSS
SaveExploits0Affected Software1
20