CVE-2023-24439 — Jenkins Project / Jenkins JIRA Pipeline Steps Plugin

Description (CNA)

Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier stores the private keys unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins JIRA Pipeline Steps Plugin	affected unspecified through 2.0.165.v8846cf59f3db; unknown next of 2.0.165.v8846cf59f3db before unspecified

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774

CISA-ADP

No English description supplied.

No references supplied.