Skip to content
OpenAdvisories

Package · Maven

com.amazonaws:codedeploy

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    AWS CodeDeploy Plugin stored AWS Secret Key in plain text

    Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a Insufficiently Protected Credentials vulnerability in AWSCodeDeployPublisher.java that can result in Credentials Disclosure. This attack appear to be exploitable via local file …