Skip to content
Sign in
Not rated

CVE-2022-34802 Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its…

Description

Jenkins RocketChat Notifier Plugin 1.5.2 and earlier stores the login password and webhook token unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins RocketChat Notifier Plugin 1.5 earliest → 1.5.2 No fix stated

Other CVEs of Jenkins RocketChat Notifier Plugin

The 3 CVEs of Jenkins RocketChat Notifier Plugin →
CVE-2022-28139 A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read… Not rated CVE-2022-28138 A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows… Not rated
Track this CVE