Jenkins Support Core Plugin stores sensitive data in plain text
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-25187US | medium6.5OT erhöht | — | ||
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/jenkinsci/support-core-pluginPACKAGE
- https://github.com/jenkinsci/support-core-plugin/commit/c6d20da4f372f03bd3e4844f0df2f109df68a63cWEB
- https://github.com/jenkinsci/support-core-plugin/commit/e90487a87bc0a3445c887203f5badec17af905c5WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-25187ADVISORY
- https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2186WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan