CVE-2022-23116 in Conjur Secrets Plugin

Riassunto

di MITRE • 12/01/2022

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 11/01/2022
• Divulgazione: 12/01/2022
• Moderazione: accettato
• Voce: VDB-190248
• CPE: pronto
• CWE: CWE-693 (confermato)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00828
• KEV: no
• Attività: molto basso
• Settore: Telecommunication

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-23116
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-23116
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-23116/