← Database

CVE-2026-33003

MEDIUM CVSS: 4.3 Published: 2026-03-18 Modified: 2026-06-17

Description

Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected Platforms

Jenkins Loadninja

Weakness Type

CWE-312

References