Jenkins Support Core Plugin stores sensitive data in plain text
Moderate severity
GitHub Reviewed
Published
Feb 16, 2022
to the GitHub Advisory Database
•
Updated Dec 28, 2023
Package
Affected versions
< 2.79.1
Patched versions
2.79.1
Description
Published by the National Vulnerability Database
Feb 15, 2022
Published to the GitHub Advisory Database
Feb 16, 2022
Reviewed
Jul 27, 2022
Last updated
Dec 28, 2023
Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.
References