Skip to content
OpenAdvisories
Medium · 4.9 CVE-2019-10363 EUVD-2022-5112GHSA-r69h-6c4g-63xf

Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code Plugin

Published Jul 31, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Configuration as Code Plugin Package: io.jenkins:configuration-as-code Category: Web / CMS Ecosystem: Maven

Description

Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Configuration as Code Plugin 1.24 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven io.jenkins:configuration-as-code < 1.25 1.25 GHSA-r69h-6c4g-63xf

References