Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
| Software | From | Fixed in |
|---|---|---|
org.jenkins-ci.plugins / vaddy-plugin
|
- | 1.2.8.x |
| jenkins / vaddy | - | 1.2.8.x |