Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2022-34801

Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

VectorNETWORK

PublishedJun 30, 2022, 18:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

tools.devnull:build-notifications(Maven)0N/AN/A

References

https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056

Weakness Type

CWE-319

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK