Lucene search
GoogleOSV:GHSA-757G-M98V-6R49HistoryMay 24, 2022 - 4:58 p.m.
Jenkins Sofy.AI Plugin stores API token in plain text
2022-05-2416:58:49
Google
osv.dev
5
jenkins
sofy.ai
api token
plaintext
job config.xml
jenkins controller
extended read permission
file system
security advisory
software
Jenkins Sofy.AI Plugin stores an API token unencrypted in job config.xml files on the Jenkins controller. This token can be viewed by users with Extended Read permission or access to the Jenkins controller file system.
As of publication of this advisory there is no fix.
Related
prion
prion
Design/Logic Flaw
2019-10-16 14:15:00
cvelist
cvelist
CVE-2019-10447
2019-10-16 13:00:49
cve
cve
CVE-2019-10447
2019-10-16 14:15:12
github
github
Jenkins Sofy.AI Plugin stores API token in plain text
2022-05-24 16:58:49
osv
osv
CVE-2019-10447
2019-10-16 14:15:12
nvd
nvd
CVE-2019-10447
2019-10-16 14:15:12