1 matches found
Encrypted values of credentials revealed to users with Extended Read permission in credentials
credentials 1380.va435002fa924 and earlier, except 1371.1373.v4ebfab7161e9, does not redact encrypted values of credentials using the SecretBytes type e.g., Certificate credentials, or Secret file credentials from Plain Credentials Plugin when accessing item config.xml via REST API or CLI. This...
7.5CVSS5.2AI score0.00591EPSS
SaveExploits0Affected Software1
20