Lucene search
GoogleOSV:GHSA-G7FX-MMJC-R7GVHistoryJan 13, 2022 - 12:00 a.m.
Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets
2022-01-1300:00:52
Google
osv.dev
8
0.002 Low
EPSS
Percentile
52.5%
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
Related
github
github
prion
prion
Security feature bypass
2022-01-12 20:15:00
cvelist
cvelist
CVE-2022-23116
2022-01-12 19:06:23
nvd
nvd
CVE-2022-23116
2022-01-12 20:15:09
cve
cve
CVE-2022-23116
2022-01-12 20:15:09
nessus
nessus
Jenkins Enterprise and Operations Center < 2.277.43.0.5 / 2.319.2.5 Multiple Vulnerabilities (CloudBees Security Advisory 2022-01-12)
2022-02-15 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-01-12)
2022-01-21 00:00:00
Jenkins LTS < 2.319.2 / Jenkins weekly < 2.330 Multiple Vulnerabilities
2022-01-21 00:00:00