Not rated
CVE-2022-23116 Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent…
Description
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Conjur Secrets Plugin 1.0 | earliest → 1.0.9 | No fix stated |