Code injection

2019-07-3113:15:00

PRIOn knowledge base

www.prio-n.com

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.

CPENameOperatorVersion
kubernetes_enginele0.6.2

CPE	Name	Operator	Version
	kubernetes_engine	le	0.6.2

References

www.openwall.com/lists/oss-security/2019/07/31/1

jenkins.io/security/advisory/2019-07-31/