GHSA-fcxw-hhxq-48wxLowCVSS 3.3

Insecure temporary file usage in Jenkins Git Client Plugin

Published
May 17, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

CVE-2017-1000242 →

📋 Description

Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:git-client:< 2.4.3

🔗 References (5)