~ / search / GHSA-r69h-6c4g-63xf

GHSA-r69h-6c4g-63xf

Cleartext Transmission of Sensitive Information in Jenkins Configuration as Code Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10363

Packages

EcosystemPackageAffectedFixed in
Maven io.jenkins:configuration-as-code < 1.25 1.25

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their encrypted form.

References

External links from the advisory. They lead to third-party sites.