1 matches found
Tinfoil Security Plugin stored API Secret Key in plain text
Tinfoil Security Plugin stored the API Secret Key in its configuration unencrypted in its global configuration file on the Jenkins controller. This key could be viewed by users with access to the Jenkins controller file system. The plugin now integrates with Credentials Plugin. Existing...
5.5CVSS5.6AI score0.00381EPSS
SaveExploits0Affected Software1
20