Threats tagged 'ghsa-93j6-jcjw-3rwp'

The Jenkins Sensedia API Platform Plugin version 1.0 and earlier stores the Sensedia API Manager integration token unencrypted in a global configuration XML file on the Jenkins controller. This token is also displayed in the global configuration form without masking, allowing users with access to the Jenkins controller file system or the configuration UI to view the token. There is no fix available as of the advisory publication date.