Jenkins Project Jenkins Google Compute Engine Plugin

• CVE-2023-49652 Unrated Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (while lacking Item/Configure permission on 0.5%
• CVE-2022-29052 Unrated Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read pe 0.8%