CVE-2022-28141

Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

• CWE-522

• http://www.openwall.com/lists/oss-security/2022/03/29/1Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2079Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/03/29/1Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-03-29/#SECURITY-2079Vendor Advisory

Published

Mar 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28136A cross-site request forgery (CSRF) vulnerability in Jenkins…8.8
• CVE-2022-28137A missing permission check in Jenkins JiraTestResultReporter…4.3
• CVE-2022-28138A cross-site request forgery (CSRF) vulnerability in Jenkins…4.3
• CVE-2022-28139A missing permission check in Jenkins RocketChat Notifier Pl…4.3
• CVE-2022-2814A vulnerability has been found in SourceCodester Simple and …6.1
• CVE-2022-28140Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not…8.1
• CVE-2022-28142Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS ce…7.5
• CVE-2022-28143A cross-site request forgery (CSRF) vulnerability in Jenkins…6.5
• CVE-2022-28144Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a …6.5
• CVE-2022-28145Jenkins Continuous Integration with Toad Edge Plugin 2.3 and…5.4
• CVE-2022-28146Jenkins Continuous Integration with Toad Edge Plugin 2.3 and…6.5
• CVE-2022-28147A missing permission check in Jenkins Continuous Integration…4.3