Package · Maven

com.cloudbees.jenkins.plugins:kubernetes-credentials-provider

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2023-24425

Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin

Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials t…

Jenkins Project Jenkins Kubernetes Credentials Provider Plugin com.cloudbees.jenkins.plugins:kubernetes-credentials-provider Web / CMS Maven

Jan 24, 2023