CVE-2019-10362

Name of the Vulnerable Software and Affected Versions Jenkins Configuration as Code Plugin versions 1.24 and earlier

Description The issue allows attackers with permission to change Jenkins system configuration to obtain the values of environment variables due to variable interpolation during configuration import when exporting. This occurs because values are not properly escaped, resulting in the exposure of sensitive information.

Recommendations For Jenkins Configuration as Code Plugin versions 1.24 and earlier, update to a version later than 1.24 to resolve the issue.