Product · Jenkins Project

Jenkins Reverse Proxy Auth Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2022-45384

Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords

Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.

Jenkins Project Jenkins Reverse Proxy Auth Plugin org.jenkins-ci.main:reverse-proxy-auth-plugin Web / CMS Maven

Nov 15, 2022