Description
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
Remediation
References
http://www.securityfocus.com/bid/101940
https://jenkins.io/security/advisory/2017-04-27/
Related Vulnerabilities
CVE-2014-7827 Vulnerability in maven package org.picketlink:picketlink-federation
CVE-2020-26237 Vulnerability in maven package org.webjars.npm:highlight.js
CVE-2021-23926 Vulnerability in maven package org.apache.xmlbeans:xmlbeans
CVE-2022-22965 Vulnerability in maven package org.springframework.boot:spring-boot-starter-webflux
CVE-2019-3875 Vulnerability in maven package org.keycloak:keycloak-services