Description
Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zoom Communications | Zoom Jenkins Marketplace plugin | < 1.6 | 1.6 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.jenkins.plugins:zoom | < 1.6 | 1.6 | GHSA-4352-jxwg-88rm |