CVE-2022-36901

Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they…

published July 27, 2022

CVSS
—
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00864 · 58.2th percentile
Published
2022-07-27T14:25Z
EPSS history
Timeline
  • 27 JUL 14:25Z
    Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they…
    cvelistv5