QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-30527

Back to search

CVE-2023-30527

Published: Apr 12, 2023

Modified: Feb 7, 2025

PUBLISHED

Description

Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

VendorProductVersions

Jenkins Project

Jenkins WSO2 Oauth Plugin

affected
0 - <= 1.0

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now