2 matches found
GHSA-3858-58W9-WPCG Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form
An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm/config.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser e.g. malicious extension to retrieve t...
4.3CVSS4.3AI score0.01131EPSS
SaveExploits0References2
RedHat Update for firefox RHSA-2017:0190-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
9.8CVSS8.1AI score0.33534EPSS
SaveExploits16References2
20