CVE-2022-27217
Assigner: jenkins
Published: 2022-03-15T16:46:10
State: PUBLISHED
affected: product: Jenkins Vmware vRealize CodeStream Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 1.2
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 1.2
versionType: custom
descriptions: value: Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.