Severity
Low
Analysis Summary
CVE-2022-45384
Jenkins Reverse Proxy Auth Plugin could allow a local authenticated attacker to obtain sensitive information, caused by the storage of manager password unencrypted in the global config.xml file. By gaining access to the config.xml file, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-45384
Affected Vendors
Jenkins
Affected Products
Jenkins Reverse Proxy Auth Plugin 1.7.3
Remediation
Refer to Jenkins Security Advisory for patch, upgrade or suggested workaround information.