Threats tagged 'ghsa-2vmr-8c82-x8xq'

The Jenkins ByteGuard Build Actions Plugin version 1.0 and earlier stores API tokens unencrypted in job configuration files on the Jenkins controller. These tokens are accessible to users with Item/Extended Read permissions or those with file system access to the Jenkins controller. Additionally, the plugin's job configuration form does not mask these credentials, increasing the risk of token exposure. No fix is currently available for this vulnerability.