Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-27218

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8g9w-5jv6-7m4x

Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.

gitlab/maven/com.incapptic.plugins/incapptic-connect-uploader/CVE-2022-27218

Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.