Threats tagged 'ghsa-jxwj-qccf-4896'

The Jenkins IFTTT Build Notifier Plugin version 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job configuration files on the Jenkins controller. These keys can be accessed by users with Item/Extended Read permission or by anyone with access to the Jenkins controller file system. This exposure could lead to unauthorized access to the IFTTT Maker Channel. As of the advisory publication, no fix is available.