1 result · Feed
-
High 7.8
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Jenkins project Jenkins AWS CodePipeline Plugin version 0.36 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodePipelineSCM.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file ac…