| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:google-compute-engine | < 4.3.9 | 4.3.9 |
| google compute engine | ≤ 4.3.8 |
Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Agent/Extended Read permission, or access to the Jenkins controller file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free