CVE-2022-34801

Summary

Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Build Notifications Pluginunspecified <= 1.5.0affected
Jenkins projectJenkins Build Notifications Pluginnext of 1.5.0 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References