Lucene search

K
osvGoogleOSV:GHSA-9678-5F6F-WP3F
HistoryMay 24, 2022 - 4:55 p.m.

Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials

2022-05-2416:55:59
Google
osv.dev
10
jenkins
beaker
plugin
credentials
unencrypted
controller
file system
encrypted
software

EPSS

0

Percentile

12.6%

Beaker builder Plugin stored the Beaker password unencrypted on the Jenkins controller. This password could be viewed by users with access to the Jenkins controller file system.

Beaker builder Plugin now stores these credentials encrypted.

EPSS

0

Percentile

12.6%

Related for OSV:GHSA-9678-5F6F-WP3F