Junglewise Threat Intelligence

CVE-2022-29052: Private key stored in plain text by Jenkins Google Compute Engine Plugin

CVE-2022-29052 · Severity: low · CVSS 3.1 · Published 2022-04-13

Technologies: org.jenkins-ci.plugins:google-compute-engine (Maven). Vendors: Maven.

Executive brief

Private key stored in plain text by Jenkins Google Compute Engine Plugin

Affected products

Maven org.jenkins-ci.plugins:google-compute-engine

Related threats

Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability