Jenkins view-cloner Plugin 1.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2024-08-02T10:56:03.987Z
Reserved: 2023-01-23T00:00:00
Link: CVE-2023-24450

No data.

Status : Modified
Published: 2023-01-26T21:18:18.487
Modified: 2024-11-21T07:47:53.400
Link: CVE-2023-24450

No data.