发布于3月6日3月6日 超级管理员 Jenkins Advisory 2024-10-02: CVE-2024-47805: Encrypted values of credentials revealed to users with Extended Read permission in Credentials Plugin Severity 8 CVSS (AV:N/AC:L/Au:N/C:C/I:N/A:N) Published 10/03/2024 Created 10/03/2024 Added 10/03/2024 Modified 01/28/2025 Description Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI. Solution(s) jenkins-lts-upgrade-2_462_3 jenkins-upgrade-2_479 References https://attackerkb.com/topics/cve-2024-47805 CVE - 2024-47805 https://jenkins.io/security/advisory/2024-10-02/
参与讨论
你可立刻发布并稍后注册。 如果你有帐户，立刻登录发布帖子。
注意：你的帖子需要版主批准后才能看到。