CVE-2023-30528: Medium severity jenkins wso2 oauth plugin vulnerability
Published Apr 12, 2023
·Updated
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it.
Affected Software
1 affected component
jenkins Wso2 Oauth Jenkins<=1.0
Event History
Apr 12, 2023
CVE Published
05:05 PM
Data Sourced
05:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-30528?
CVE-2023-30528 is considered a medium severity vulnerability due to its potential to expose sensitive credentials.
2
How do I fix CVE-2023-30528?
To fix CVE-2023-30528, it is recommended to upgrade the WSO2 Oauth Plugin to version 1.1 or later.
3
What does CVE-2023-30528 affect?
CVE-2023-30528 affects Jenkins WSO2 Oauth Plugin versions 1.0 and earlier.
4
What kind of information is exposed in CVE-2023-30528?
CVE-2023-30528 exposes the WSO2 Oauth client secret on the global configuration form.
5
Is there a workaround for CVE-2023-30528?
There are no officially documented workarounds for CVE-2023-30528; upgrading the plugin is the recommended solution.