Executive brief
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:gitlab-oauth
Junglewise Threat Intelligence
CVE-2022-27206: Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
CVE-2022-27206 · Severity: low · CVSS 3.1 · Published 2022-03-16
Technologies: org.jenkins-ci.plugins:gitlab-oauth (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability in GitLab Authentication Plugin
- Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
- Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
- Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
- Open redirect vulnerability in Jenkins GitLab Authentication Plugin