CVE-2024-34147
Assigner: jenkins
Published: 2024-05-02T13:28:05.238Z
State: PUBLISHED
affected: vendor: Jenkins Project
product: Jenkins Telegram Bot Plugin
versions: version: 0
versionType: maven
lessThanOrEqual: 1.4.0
status: affected
defaultStatus: unknown
descriptions: value: Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.