1 matches found
Secret displayed without masking by chef-identity
chef-identity stores the user.pem key in its global configuration file io.chef.jenkins.ChefIdentityBuildWrapper.xml on the Jenkins controller as part of its configuration. While this key is stored encrypted on disk, in chef-identity 2.0.3 and earlier the global configuration form does not mask th...
5.3CVSS5.6AI score0.00509EPSS
SaveExploits0Affected Software1
20