CVE-2023-24440 Vulnerability in maven package org.jenkins-ci.plugins:jira-steps

Description

Jenkins JIRA Pipeline Steps Plugin 2.0.165.v8846cf59f3db and earlier transmits the private key in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Remediation

References

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2774

Related Vulnerabilities

CVE-2020-2125 Vulnerability in maven package ru.yandex.jenkins.plugins.debuilder:debian-package-builder

CVE-2013-4330 Vulnerability in maven package org.apache.camel:camel-core

CVE-2020-1951 Vulnerability in maven package org.apache.tika:tika-parsers

CVE-2023-43495 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2018-1000112 Vulnerability in maven package org.jenkins-ci.plugins:mercurial

Severity

Medium

Classification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N