Wednesday, January 19, 2022

Jenkins Advisory 2022-01-12: CVE-2022-20621:

Jenkins Metrics Plugin and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
  • jenkins-lts-upgrade-2_319_2
  • jenkins-upgrade-2_330

  • References
  • CVE - 2022-20621


    Copyright © 2021 Vulnerability Database | Cyber Details™

    thank you Templateism for the design - You should have written the code a little more complicated - Nothing Encrypted anymore