GHSA-68qx-whxm-h4c4
Suggest an improvement- Source
- https://github.com/advisories/GHSA-68qx-whxm-h4c4
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-68qx-whxm-h4c4/GHSA-68qx-whxm-h4c4.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-68qx-whxm-h4c4
- Aliases
- Published
- 2022-05-14T02:57:33Z
- Modified
- 2024-02-16T08:18:47.523220Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- Exposure of sensitive information vulnerability
- Details
-
An exposure of sensitive information vulnerability exists in Jenkins Tinfoil Security Plugin 1.6.1 and earlier in TinfoilScanRecorder.java that allows attackers with file system access to the Jenkins master to obtain the API secret key stored in this plugin's configuration.
- Database specific
{ "nvd_published_at": "2018-08-01T13:29:00Z", "cwe_ids": [ "CWE-200" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-11-01T22:31:50Z" }- References
Affected packages
Maven / com.tinfoilsecurity.plugins:tinfoil-scan
Package
- Name
- com.tinfoilsecurity.plugins:tinfoil-scan
- View open source insights on deps.dev
- Purl
- pkg:maven/com.tinfoilsecurity.plugins/tinfoil-scan