Kurz gesagt
- CVE-2022-29052 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in org.jenkins-ci.plugins:google-compute-engine, google compute engine (jenkins).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.75%, höher als bei 55.1% aller Schwachstellen.
- Abhilfe: auf 4.3.9 oder neuer aktualisieren.
Description
Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Agent/Extended Read permission, or access to the Jenkins controller file system.
NVD description
Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Weitere Schwachstellen in org.jenkins-ci.plugins:google-compute-engine
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free