Kubernetes

Security Warnings

• Lack of masking of secrets in build log(last version affected: 1.7.0)
• CSRF vulnerability and missing permission checks allowed capturing credentials(last version affected: 1.10.1)
• Jenkins controller environment variables accessible(last version affected: 1.27.3)
• Missing permission check allows listing pod templates(last version affected: 1.27.3)
• Missing permission check allows enumerating credentials IDs(last version affected: 1.27.3)
• Improper masking of credentials(last version affected: 3909.v1f2c633e8590)