← Back to CVE List

CVE-2022-41255

Published: 2022-09-21T16:15Z
Last Modified: 2024-11-21T07:22Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt