Description
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins Project | Jenkins Report Portal Plugin | ≤ 0.5 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:reportportal | <= 0.5 | — | GHSA-j55j-28wc-v338 |
Advisories 1
- WID-SEC-2023-0952 Jenkins Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 12, 2023