5.3
Medium
CVE-2022-43426 Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the…
Description
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins S3 Explorer Plugin 1.0 | earliest → 1.0.8 | No fix stated |