Executive brief
Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller
Affected products
- Maven org.jenkins-ci.plugins:wso2id-oauth
Junglewise Threat Intelligence
CVE-2023-30527: Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller
CVE-2023-30527 · Severity: low · CVSS 3.1 · Published 2023-04-12
Technologies: org.jenkins-ci.plugins:wso2id-oauth (Maven). Vendors: Maven.