CVE-2022-28135 log

Severity Medium
Remote Yes
Type Information disclosure
Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on Jenkins instant-messaging Plugin on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Group Package Affected Fixed Severity Status Ticket
AVG-2678 jenkins 0.0.0-1 High Not affected