En resumen
- CVE-2022-29052 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a org.jenkins-ci.plugins:google-compute-engine, google compute engine (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.75%, mayor que el 55.1% de las vulnerabilidades.
- Solución: actualizar a 4.3.9 o posterior.
Description
Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Agent/Extended Read permission, or access to the Jenkins controller file system.
NVD description
Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Más vulnerabilidades de org.jenkins-ci.plugins:google-compute-engine
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free