Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-53906
HistoryJul 04, 2022 - 12:00 a.m.

Jenkins OpsGenie Plugin Information Disclosure Vulnerability

2022-07-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
16

0.001 Low

EPSS

Percentile

22.0%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability exists in Jenkins OpsGenie Plugin version 1.9 and earlier, which stems from storing unencrypted API keys in its global configuration file and config.xml file, which can be exploited by an attacker to cause sensitive information to be accessed.

CPENameOperatorVersion
jenkins opsgenie pluginle1.9

0.001 Low

EPSS

Percentile

22.0%

Related for CNVD-2022-53906