Description
Jenkins Build Notifications Plugin 1.5.0 and earlier stores tokens unencrypted in its global configuration files on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2056
Related Vulnerabilities
CVE-2018-18282 Vulnerability in npm package next
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-storage-script-dev-server
CVE-2011-1184 Vulnerability in maven package org.apache.tomcat:tomcat-catalina
CVE-2020-27217 Vulnerability in maven package org.eclipse.hono:hono-bom
CVE-2015-0264 Vulnerability in maven package org.apache.camel:camel-core