netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-35rx-7pc8-6963

Browse Source
This commit is contained in:
advisory-database[bot]
2023-10-02 19:42:19 +00:00
parent f54c5d6227
commit f3ada3f213
1 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/10/GHSA-35rx-7pc8-6963/GHSA-35rx-7pc8-6963.json
+15 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35rx-7pc8-6963",
"modified": "2022-12-16T19:45:04Z",
"modified": "2023-10-02T19:41:02Z",
"published": "2022-10-19T19:00:18Z",
"aliases": [
"CVE-2022-43419"
],
"summary": "API keys stored in plain text by Jenkins Katalon Plugin",
"details": "Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nKatalon Plugin 1.0.33 no longer stores the API keys directly, instead accessing them through its [Credentials Plugin](https://plugins.jenkins.io/credentials) integration, once affected job configurations are saved again.",
"details": "Jenkins Katalon Plugin 1.0.32 and earlier stores API keys unencrypted in job `config.xml` files on the Jenkins controller as part of its configuration.\n\nThese API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.\n\nKatalon Plugin 1.0.33 no longer stores the API keys directly, instead accessing them through its [Credentials Plugin](https://plugins.jenkins.io/credentials) integration, once affected job configurations are saved again.",
"severity": [
{
"type": "CVSS_V3",
@@ -20,6 +20,11 @@
"ecosystem": "Maven",
"name": "org.jenkins-ci.plugins:katalon"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -40,6 +45,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-43419"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/katalon-plugin/pull/28"
},
{
"type": "WEB",
"url": "https://github.com/jenkinsci/katalon-plugin/commit/64f819387f3f14d54f3a1542578a5c7aa9feb85c"
},
{
"type": "PACKAGE",
"url": "https://github.com/jenkinsci/katalon-plugin"