Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins OpsGenie Plugin unspecified Clear all filters
TI-2022-15611 CVE-2022-34804 · GHSA-7r65-pjgv-h2h9

Cleartext transmission of sensitive information in Jenkins OpsGenie Plugin

Priority LOW 20

Jenkins OpsGenie Plugin 1.9 and earlier transmits API keys in plain text as part of the global Jenkins configuration form and job configuration forms, potentially resulting in their exposure.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00427 Published 2022-06-30 No fix listed CWE-319
TI-2022-15610 CVE-2022-34803 · GHSA-273c-fjw8-v2w8

Insufficiently protected credentials in Jenkins OpsGenie Plugin

Priority LOW 21

Jenkins OpsGenie Plugin 1.9 and earlier stores API keys unencrypted in its global configuration file and in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission (…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00604 Published 2022-06-30 No fix listed CWE-522