Wednesday, January 19, 2022

Jenkins Advisory 2022-01-12: CVE-2022-20621:

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
Solution(s)
jenkins-lts-upgrade-2_319_2
jenkins-upgrade-2_330


Referenceshttps://attackerkb.com/topics/cve-2022-20621
CVE - 2022-20621
https://jenkins.io/security/advisory/2022-01-12/