CVE-2023-30530

Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:consul_kv_builder:*:*:*:*:*:jenkins:*:*

History

20 Apr 2023, 22:04

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-12 18:15

Updated : 2024-02-04 23:37


NVD link : CVE-2023-30530

Mitre link : CVE-2023-30530

CVE.ORG link : CVE-2023-30530


JSON object : View

Products Affected

jenkins

  • consul_kv_builder
CWE
CWE-312

Cleartext Storage of Sensitive Information