Executive brief
Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
Affected products
- Maven org.jenkins-ci.plugins:wso2id-oauth
Junglewise Threat Intelligence
CVE-2023-30528: Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
CVE-2023-30528 · Severity: low · CVSS 3.1 · Published 2023-04-12
Technologies: org.jenkins-ci.plugins:wso2id-oauth (Maven). Vendors: Maven.
Related threats
- Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
- Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
- Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
- Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller