Beveiligingsadvies

CVE-2026-53442

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-10 13:06:02

Laatst bijgewerkt 2026-06-10 14:36:51

Toegewezen door jenkins

CVSS-score 5.3

Status PUBLISHED

Beschrijving

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.

← Alle CVE's bekijken Bekijk op cve.org ↗