CVE-2022-27195

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-27195
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-27195.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-27195
Aliases
Published
2022-03-15T17:15:09Z
Modified
2024-10-12T09:22:37.719393Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, including password parameter values, in their build.xml files. These values are stored unencrypted and can be viewed by users with access to the Jenkins controller file system.

References

Affected packages

Git / github.com/jenkinsci/parameterized-trigger-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/parameterized-trigger-plugin
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ae0ac1a5c42f48bc424a06b7c44fda95a1f3da6a

Affected versions

2.*

2.36

parameterized-trigger-2.*

parameterized-trigger-2.10
parameterized-trigger-2.11
parameterized-trigger-2.12
parameterized-trigger-2.13
parameterized-trigger-2.14
parameterized-trigger-2.15
parameterized-trigger-2.16
parameterized-trigger-2.17
parameterized-trigger-2.18
parameterized-trigger-2.19
parameterized-trigger-2.20
parameterized-trigger-2.21
parameterized-trigger-2.22
parameterized-trigger-2.23
parameterized-trigger-2.24
parameterized-trigger-2.25
parameterized-trigger-2.26
parameterized-trigger-2.27
parameterized-trigger-2.28
parameterized-trigger-2.29
parameterized-trigger-2.30
parameterized-trigger-2.31
parameterized-trigger-2.32
parameterized-trigger-2.33
parameterized-trigger-2.34
parameterized-trigger-2.35
parameterized-trigger-2.35.1
parameterized-trigger-2.35.2
parameterized-trigger-2.36
parameterized-trigger-2.37
parameterized-trigger-2.38
parameterized-trigger-2.39
parameterized-trigger-2.40
parameterized-trigger-2.41
parameterized-trigger-2.42
parameterized-trigger-2.43
parameterized-trigger-2.5
parameterized-trigger-2.6
parameterized-trigger-2.7
parameterized-trigger-2.8
parameterized-trigger-2.9