Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Consul KV Builder Plugin — Jenkins Security Advisory 2023-04-12 Clear all filters
TI-2023-14366 CVE-2023-30531 · GHSA-54cw-rvr3-w6cx

Cleartext storage of sensitive information in Jenkins Consul KV Builder Plugin

Priority LOW 29

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00397 Published 2023-04-12 No fix listed CWE-312
TI-2023-14365 CVE-2023-30530 · GHSA-96c7-fqxv-rmv7

Cleartext storage of sensitive information in Jenkins Consul KV Builder Plugin

Priority LOW 20

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00323 Published 2023-04-12 No fix listed CWE-312