Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
References
Link | Resource |
---|---|
https://jenkins.io/security/advisory/2017-04-27/ | Mitigation Vendor Advisory |
http://www.securityfocus.com/bid/101940 |
Configurations
Information
Published : 2017-11-01 06:29
Updated : 2017-11-24 18:29
NVD link : CVE-2017-1000242
Mitre link : CVE-2017-1000242
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
jenkins
- git_client