Jenkins Code Dx Plugin 3.1.0 and... CVE-2023-2632
-
AV
AC
AU
C
I
A
发布：
2023-05-16
修订：
2023-05-25
Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
