Information Disclosure

org.jenkins-ci.plugins:ansible is vulnerable to Information Disclosure. A remote authenticated attacker with item/extended read permissions is able to gain access to extra variables unencrypted in job config.xml files on the Jenkins controller, resulting in disclosure of sensitive information.