1 matches found
Access key stored in plain text by metrics
metrics 4.0.2.8 and earlier stores access keys unencrypted in its global configuration file jenkins.metrics.api.MetricsAccessKey.xml on the Jenkins controller as part of its configuration. This access key can be viewed by users with access to the Jenkins controller file system. metrics 4.0.2.8.1...
5.5CVSS6AI score0.00319EPSS
SaveExploits0Affected Software1
20