Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/14 3:5 a.m.26 views

Jenkins Configuration as Code Plugin vulnerable to Exposure of Sensitive Information

A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in ConfigurationAsCode.java that allows attackers with Overall/Read access to obtain the YAML export of the Jenkins configuration. Version 0.8-alpha contains a fix for this issue...

6.5CVSS3.9AI score0.00988EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder