A vulnerability in Jenkins ECS Publisher Plugin 1.0.0 and earlier allows attackers with Item/Extended Read permission, or local file system access to the Jenkins home directory to obtain the API token configured in this…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.01584·Published 2019-03-28·Fixed in 1.0.1CWE-522