CVE-2022-29052 — Jenkins project / Jenkins Google Compute Engine Plugin

CVE-2022-29052

Jenkins project / Jenkins Google Compute Engine Plugin PUBLISHED

Description (CNA)

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

Affected (CNA)

Vendor / product	Versions
Jenkins project / Jenkins Google Compute Engine Plugin	affected unspecified through 4.3.8

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2045

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-2045

CISA-ADP

No English description supplied.

No references supplied.