https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T19:59:29.494707+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-05038 cnvd-2022-05038 2026-10-14T19:59:29.498324+00:00 cnvd-2022-05038 https://cve.radiocsirt.org/vuln/euvd-2026-13193 EUVD-2026-13193 2026-10-14T19:59:29.498380+00:00 EUVD-2026-13193 https://cve.radiocsirt.org/vuln/fkie_cve-2022-20621 fkie_cve-2022-20621 2026-10-14T19:59:29.498410+00:00

Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-gg9m-x3cg-69vh GHSA-gg9m-x3cg-69vh — Access key stored in plain text by Jenkins Metrics Plugin 2026-10-14T19:59:29.498462+00:00

Affected: Maven: org.jenkins-ci.plugins:metrics

Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file `jenkins.metrics.api.MetricsAccessKey.xml` on the Jenkins controller as part of its configuration.

This access key can be viewed by users with access to the Jenkins controller file system.

Jenkins Metrics Plugin 4.0.2.8.1 stores access key encrypted once its configuration is saved again.

Additionally, the token value is only displayed once when it is generated.

 https://cve.radiocsirt.org/vuln/gsd-2022-20621 gsd-2022-20621 2026-10-14T19:59:29.498525+00:00 gsd-2022-20621