Description
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.
Remediation
References
http://www.openwall.com/lists/oss-security/2023/04/13/3
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945
Related Vulnerabilities
CVE-2022-21186 Vulnerability in npm package @acrontum/filesystem-template
CVE-2018-5158 Vulnerability in maven package org.webjars.bower:pdfjs-dist
CVE-2016-7103 Vulnerability in maven package org.webjars.bower:jquery-ui
CVE-2020-7618 Vulnerability in npm package sds
CVE-2019-17573 Vulnerability in maven package org.apache.cxf:cxf-bundle