| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:google-kubernetes-engine | < 0.6.3 | 0.6.3 |
| kubernetes engine | ≤ 0.6.2 |
Jenkins Google Kubernetes Engine Plugin 0.6.2 and earlier created a temporary file named .kube…config containing a temporary access token in the project workspace, where it could be accessed by users with Job/Read permission.
This temporary file is now created outside the regular project workspace.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free