Skip to content
OpenAdvisories

Product · Jenkins

openshift-sync-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-9453

    Jenkins-image: sensitive data disclosure when using openshift jenkins image

    A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious us…

    Red Hat Jenkins OpenShift Developer Tools and Services openshift-sync-plugin