Description
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
Remediation
References
http://www.securityfocus.com/bid/101940
https://jenkins.io/security/advisory/2017-04-27/
Related Vulnerabilities
CVE-2018-1334 Vulnerability in maven package org.apache.spark:spark-core
CVE-2016-0763 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2021-41183 Vulnerability in maven package org.webjars.npm:jquery-ui
CVE-2021-24033 Vulnerability in npm package react-dev-utils
CVE-2019-10455 Vulnerability in maven package org.jenkins-ci.plugins:icescrum