Skip to main content

Incapptic Connect Uploader

1 CVEs product

Monthly

CVE-2022-27218 Maven MEDIUM This Month

Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins Information Disclosure Incapptic Connect Uploader
NVD
CVSS 3.1
4.3
EPSS
0.7%
EPSS 1% CVSS 4.3
MEDIUM This Month

Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission,. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Jenkins Information Disclosure Incapptic Connect Uploader
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy