CVE-2022-34806

CVE-2022-34806

Jenkins Jigomerge Plugin 0.9 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

Source: CVE-2022-34806

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다