Lucene search
GoogleOSV:GHSA-C8MF-MC3F-2WVCHistoryJun 24, 2022 - 12:00 a.m.
Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin
2022-06-2400:00:31
Google
osv.dev
14
0.001 Low
EPSS
Percentile
28.4%
Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Related
cve
cve
CVE-2022-34199
2022-06-23 17:15:17
github
github
Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin
2022-06-24 00:00:31
prion
prion
Design/Logic Flaw
2022-06-23 17:15:00
nvd
nvd
CVE-2022-34199
2022-06-23 17:15:17
cvelist
cvelist
CVE-2022-34199
2022-06-22 14:41:35
nessus
nessus
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.14 / 2.332.4.1 / 2.346.1.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-06-22)
2022-07-05 00:00:00
Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 Multiple Vulnerabilities
2022-07-15 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00