ZeroHour

CVE-2020-2133

CVSS 3.1
6.5 medium
EPSS
<1%p56
Published
()
Modified
Description

Jenkins Applatix Plugin 1.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

Vendors
jenkins
Products
applatix
Weakness
CWE-522
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.