Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqg2-c97r-rqcj

Опубликовано: 13 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 8.8

Описание

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

Пакеты

Наименование

org.csanchez.jenkins.plugins:kubernetes

maven
Затронутые версииВерсия исправления

<= 1.10.1

1.10.2

EPSS

Процентиль: 59%
0.00379
Низкий

8.8 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.8
redhat
около 7 лет назад

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

CVSS3: 8.8
nvd
около 7 лет назад

An exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.10.1 and earlier in KubernetesCloud.java that allows attackers to capture credentials with a known credentials ID stored in Jenkins.

EPSS

Процентиль: 59%
0.00379
Низкий

8.8 High

CVSS3

Дефекты

CWE-200