CVE-2022-23116: vulnerability in Jenkins Conjur Secrets Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Conjur Secrets Plugin+ Monitor org.conjur.jenkins:conjur-credentials
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.9%
Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
Affected products
Jenkins project · Jenkins Conjur Secrets PluginRelated CVEs — Jenkins Conjur Secrets Plugin
In the same product, most dangerous first.