← Back

Consul Kv Builder

consul_kv_builder

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-30531
1Jenkins
1Consul Kv Builder
Jun 17, 2026
Apr 12, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.
CVE-2023-30530
1Jenkins
1Consul Kv Builder
Jun 17, 2026
Apr 12, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins...Show more
Jenkins Consul KV Builder Plugin 2.0.13 and earlier stores the HashiCorp Consul ACL Token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.Show less