CVE-2023-30531

2023-04-1217:05:18

jenkins

www.cve.org

jenkins

consul

kv builder

plugin

vulnerability

acl token

handling

EPSS

0.001

Percentile

45.5%

JSON

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "Jenkins Consul KV Builder Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "2.0.13",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]