Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins WSO2 Oauth Plugin — Jenkins Security Advisory 2023-04-12 Clear all filters
TI-2023-14363 CVE-2023-30528 · GHSA-q9hm-hr89-hgm7

Cleartext storage of sensitive information in Jenkins WSO2 Oauth Plugin

Priority LOW 29

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00397 Published 2023-04-12 No fix listed CWE-312
TI-2023-14362 CVE-2023-30527 · GHSA-g472-f8cm-8x5f

Cleartext storage of sensitive information in Jenkins WSO2 Oauth Plugin

Priority LOW 20

Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2023-04-12 No fix listed CWE-312