Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-79872
HistoryMar 17, 2022 - 12:00 a.m.

Jenkins incapptic connect uploader Plugin has an unspecified vulnerability

2022-03-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
jenkins
incapptic connect
uploader
plugin
vulnerability
unspecified
tokens
configuration file
security
read access
file system
exploit
cnvd

EPSS

0.001

Percentile

22.0%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project. jenkins Plugin is an application. jenkins incapptic connect uploader Plugin originally had a security vulnerability that stemmed from the plugin storing unencrypted tokens in the An attacker with extended read access or access to the Jenkins controller file system could exploit this vulnerability to view the configuration file and unencrypted tokens.

EPSS

0.001

Percentile

22.0%

Related for CNVD-2022-79872