CVE-2023-50776: Medium severity jenkins vulnerability
Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50776?
CVE-2023-50776 has been rated as a high severity vulnerability due to the exposure of sensitive authentication tokens.
How do I fix CVE-2023-50776?
To fix CVE-2023-50776, upgrade the Jenkins PaaSLane Estimate Plugin to version 1.0.5 or later.
What data is compromised in CVE-2023-50776?
CVE-2023-50776 compromises PaaSLane authentication tokens stored unencrypted in job config.xml files.
Who is affected by CVE-2023-50776?
Users with Item/Extended Read permission or access to the Jenkins controller file system are affected by CVE-2023-50776.
What versions of the Jenkins PaaSLane Estimate Plugin are vulnerable to CVE-2023-50776?
Versions 1.0.4 and earlier of the Jenkins PaaSLane Estimate Plugin are vulnerable to CVE-2023-50776.