Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-50776

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c2f6-rf2r-6j6f

Tokens stored in plain text by PaaSLane Estimate Plugin Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

gitlab/maven/com.cloudtp.jenkins/paaslane-estimate/CVE-2023-50776

Tokens stored in plain text by PaaSLane Estimate Plugin Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.