CVE-2022-43426

MEDIUM

Jenkins S3 Explorer Plugin <1.0.8 - Info Disclosure

Title source: llm
STIX 2.1

Description

Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.

References (2)

Scores

CVSS v3 5.3
EPSS 0.0059
EPSS Percentile 69.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-256
Status published
Products (2)
io.jenkins.plugins/s3explorer 0Maven
jenkins/s3_explorer < 1.0.8
Published Oct 19, 2022
Tracked Since Feb 18, 2026