In breve
- CVE-2026-57302 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda org.jenkins-ci.plugins:fitnesse, fitnesse (jenkins).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.28%, superiore al 20.6% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration.
These passwords can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
As of publication of this advisory, there is no fix.
NVD description
Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Extended Read permission or access to the Jenkins controller file system.
Altre vulnerabilità di org.jenkins-ci.plugins:fitnesse
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free