Description
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
Remediation
References
http://www.securityfocus.com/bid/101940
https://jenkins.io/security/advisory/2017-04-27/
Related Vulnerabilities
CVE-2023-25158 Vulnerability in maven package org.geotools:gt-main
CVE-2021-26073 Vulnerability in npm package atlassian-connect-express
CVE-2018-7408 Vulnerability in npm package npm
CVE-2017-8032 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa
CVE-2018-1331 Vulnerability in maven package org.apache.storm:storm-core