Vulnerabilities > CVE-2022-43426 - Unspecified vulnerability in Jenkins S3 Explorer 1.0.7/1.0.8
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWS_SECRET_ACCESS_KEY form field, increasing the potential for attackers to observe and capture it.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |