Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing information about the Jenkins controller file system.
The product writes sensitive information to a log file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Folders | Jenkins | * | 6.846.v23698686f0f6 (including) |
| OCP-Tools-4.12-RHEL-8 | RedHat | jenkins-2-plugins-0:4.12.1706515741-1.el8 | * |
| OCP-Tools-4.14-RHEL-8 | RedHat | jenkins-2-plugins-0:4.14.1706516441-1.el8 | * |