Cleartext Storage of Sensitive Information in Jenkins Build Notifications Plugin

보통 4.3CVE-2022-34801 · GHSA-7298-w54j-q7wm · Published 30/06/2022 · updated 17/06/2026

요약

CVE-2022-34801은(는) tools.devnull:build-notifications, build notifications (jenkins)에 영향을 주는 보통 (CVSS 4.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.52%, 전체 취약점의 44.6%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
tools.devnull:build-notifications Maven	`≤ 1.5.0`	No fix yet
build notifications jenkins	`≤ 1.5.0`	No fix yet

Description

Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

NVD description

Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

References

nvd.nist.gov/vuln/detail/CVE-2022-34801 · ADVISORY
jenkinsci/build-notifications-plugin · PACKAGE
jenkins.io/security/advisory/2022-06-30 · WEB

tools.devnull:build-notifications의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free