Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
added 2018/07/30 12:0 a.m.10 views

Tinfoil Security Plugin stored API Secret Key in plain text

Tinfoil Security Plugin stored the API Secret Key in its configuration unencrypted in its global configuration file on the Jenkins controller. This key could be viewed by users with access to the Jenkins controller file system. The plugin now integrates with Credentials Plugin. Existing...

5.5CVSS5.6AI score0.00381EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder