https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:57:29.908605+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197070 EUVD-2026-197070 2026-10-02T14:57:29.913521+00:00 EUVD-2026-197070 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39155 fkie_cve-2023-39155 2026-10-02T14:57:29.913562+00:00

Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/ghsa-5jc5-m87x-88fj GHSA-5jc5-m87x-88fj — Secret displayed without masking by Chef Identity Plugin 2026-10-02T14:57:29.913601+00:00

Affected: Maven: org.jenkins-ci.plugins:chef-identity

Chef Identity Plugin stores the user.pem key in its global configuration file `io.chef.jenkins.ChefIdentityBuildWrapper.xml` on the Jenkins controller as part of its configuration.

While this key is stored encrypted on disk, in Chef Identity Plugin 2.0.3 and earlier the global configuration form does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.

 https://cve.radiocsirt.org/vuln/gsd-2023-39155 gsd-2023-39155 2026-10-02T14:57:29.913639+00:00 gsd-2023-39155 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1902 WID-SEC-W-2023-1902 — Jenkins: Mehrere Schwachstellen 2026-10-02T14:57:29.913657+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.