CVE-2022-34804
MEDIUMJenkins OpsGenie Plugin < 1.9 - Cleartext Transmission of Sensitive Information via Configuration Forms
Title source: llmDescription
Jenkins OpsGenie Plugin 1.9 and earlier transmits API keys in plain text as part of the global Jenkins configuration form and job configuration forms, potentially resulting in their exposure.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1877
Scores
CVSS v3
4.3
EPSS
0.0039
EPSS Percentile
31.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-319
Status
published
Products (2)
jenkins/opsgenie
< 1.9
org.jenkins-ci.plugins/opsgenie
0Maven
Published
Jun 30, 2022
Tracked Since
Feb 18, 2026