Information Disclosure

2022-06-1608:02:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

rundeck

information disclosure

key storage plugin

plaintext

remote attackers

EPSS

0.001

Percentile

40.3%

JSON

org.rundeck:rundeck is vulnerable to information disclosure. A faulty mechanism in key storage converter plugin may cause credentials to be written in plaintext to the backend storage, which allows remote attackers to gain access to confidential keys and passwords.