Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins s3 explorer plugin

aws_secret_access_key

exposure

security flaw

nvd

0.001 Low

EPSS

Percentile

33.5%

JSON

Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.

CPENameOperatorVersion
s3_explorerle1.0.8

CPE	Name	Operator	Version
	s3_explorer	le	1.0.8

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2022-43426