CVE-2023-2633 — API keys stored and displayed in plain text by Code Dx Plugin

CVE-2023-2633

API keys stored and displayed in plain text by Code Dx Plugin PUBLISHED

Description (CNA)

Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them.

Affected (CNA)

Vendor / product	Versions
Jenkins / Jenkins Code Dx Plugin	affected 0 through 3.1.0

CWE

CWE-256

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146

CISA-ADP

No English description supplied.

No references supplied.