Jenkins Security Advisory 2023-04-12
Jenkins published a security advisory dated 2023-04-12 listing 14 plugins as affected, including Kubernetes, Azure Key Vault, Delinea Secret Server, Thycotic DevOps Secrets Vault and NeuVector Vulnerability Scanner. The source text lists only the plugin names and does not describe the vulnerabilities, severity or fixed versions.
What changes for platform teams
Platform teams running Jenkins should check whether any of the listed plugins are installed and read the full advisory for affected and fixed versions. The source text does not say what changes or which versions to upgrade to.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules