CVE-2022-34801
First published: Thu Jun 30 2022(Updated: )
Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Credit: jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com jenkinsci-cert@googlegroups.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Jenkins Build Notifications | <=1.5.0 | |
| maven/tools.devnull:build-notifications | <=1.5.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Jenkins Build Notifications Plugin?
The vulnerability ID for Jenkins Build Notifications Plugin is CVE-2022-34801.
What is the severity level of CVE-2022-34801?
The severity level of CVE-2022-34801 is medium (4.3).
What is the description of CVE-2022-34801?
CVE-2022-34801 refers to the vulnerability where Jenkins Build Notifications Plugin 1.5.0 and earlier transmits tokens in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Which software versions are affected by CVE-2022-34801?
Jenkins Build Notifications Plugin versions up to and including 1.5.0 are affected by CVE-2022-34801.
How can I fix the vulnerability in Jenkins Build Notifications Plugin?
To fix the vulnerability in Jenkins Build Notifications Plugin, update to a version later than 1.5.0.
- collector/nvd-index
- collector/github-advisory-latest
- alias/GHSA-7298-w54j-q7wm
- alias/CVE-2022-34801
- collector/nvd-cve
- collector/nvd-api
- collector/github-advisory
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/trending
- agent/tags
- agent/source
- vendor/jenkins
- canonical/jenkins build notifications
- version/jenkins build notifications/1.5.0
- package-manager/maven