QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-24442

Back to search

CVE-2023-24442

Published: Jan 24, 2023

Modified: Apr 2, 2025

PUBLISHED

Description

Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

VendorProductVersions

Jenkins Project

Jenkins GitHub Pull Request Coverage Status Plugin

affected
unspecified - <= 2.2.0
unknown
next of 2.2.0 - < unspecified

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now