6.5
Medium
CVE-2022-45392 Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job…
Description
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by attackers with Extended Read permission, or access to the Jenkins controller file system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins NS-ND Integration Performance Publisher Plugin 4.8 | earliest → 4.8.0.143 | No fix stated |
Other CVEs of Jenkins NS-ND Integration Performance Publisher Plugin
The 8 CVEs of Jenkins NS-ND Integration Performance Publisher Plugin →
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on…
7.5
High
CVE-2022-38666
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.146 and earlier unconditionally disables SSL/TLS…
7.5
High
CVE-2022-45391
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables…
7.5
High
CVE-2022-41229
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of…
5.4
Medium