# io.jenkins:configuration-as-code (Maven) vulnerabilities

9 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://central.sonatype.com/artifact/io.jenkins/configuration-as-code

## Advisories (9)

### [CVE-2022-23106](https://cve.now/CVE-2022-23106): Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token…

- Severity: Unrated
- Published: Jan 12, 2022
- Affected: from 1.55, fixed in 1.55.1; from 1.54, fixed in 1.54.1; from 1.48, fixed in 1.53.1; fixed in 1.47.1.

### [CVE-2019-10367](https://cve.now/CVE-2019-10367): Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some…

- Severity: Unrated
- Published: Aug 7, 2019
- Affected: fixed in 1.27.

### [CVE-2019-10363](https://cve.now/CVE-2019-10363): Jenkins Configuration as Code Plugin 1.24 and earlier did not reliably identify sensitive values expected to be exported in their…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 1.25.

### [CVE-2019-10362](https://cve.now/CVE-2019-10362): Jenkins Configuration as Code Plugin 1.24 and earlier did not escape values resulting in variable interpolation during configuration…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 1.25.

### [CVE-2019-10345](https://cve.now/CVE-2019-10345): Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 1.25.

### [CVE-2019-10344](https://cve.now/CVE-2019-10344): Missing permission checks in Jenkins Configuration as Code Plugin 1.24 and earlier in various HTTP endpoints allowed users with…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 1.25.

### [CVE-2019-10343](https://cve.now/CVE-2019-10343): Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 1.25.

### [CVE-2018-1000610](https://cve.now/CVE-2018-1000610): A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in…

- Severity: Unrated
- Published: Jun 26, 2018
- Affected: fixed in 0.8-alpha.

### [CVE-2018-1000609](https://cve.now/CVE-2018-1000609): A exposure of sensitive information vulnerability exists in Jenkins Configuration as Code Plugin 0.7-alpha and earlier in…

- Severity: Unrated
- Published: Jun 26, 2018
- Affected: fixed in 0.8-alpha.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/maven/io.jenkins:configuration-as-code
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.