Description (CNA)
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins Project / Jenkins Report Portal Plugin | affected 0 through 0.5 |
CWE
No CWE identifiers supplied.
References
- https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945
- http://www.openwall.com/lists/oss-security/2023/04/13/3
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.