CVE-2023-39155

Summary

Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3192
• http://www.openwall.com/lists/oss-security/2023/07/26/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3192
• http://www.openwall.com/lists/oss-security/2023/07/26/2

• ←Previous
• Next→