Not rated
CVE-2020-2198 Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API…
Description
Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Project Inheritance Plugin 19.08 | earliest → 19.08.02 | No fix stated |
Other CVEs of Jenkins Project Inheritance Plugin
The 6 CVEs of Jenkins Project Inheritance Plugin →
CVE-2022-34787
Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips,…
Not rated
CVE-2020-2197
Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to…
Not rated
CVE-2019-10407
Jenkins Project Inheritance Plugin 2.0.0 and earlier displayed a list of environment variables passed to a build without…
Not rated
CVE-2019-10408
A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers…
Not rated