Description
Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.
Remediation
References
https://www.jenkins.io/security/advisory/2020-11-04/#SECURITY-1646
Related Vulnerabilities
CVE-2021-25122 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2022-4116 Vulnerability in maven package io.quarkus:quarkus-vertx-http-deployment
CVE-2011-3375 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2024-22207 Vulnerability in npm package @fastify/swagger-ui