Jenkins Vmware vRealize CodeStream Plugin信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Vmware vRealize CodeStream Plugin 1.2 and prior versions contain an information disclosure vulnerability that stems from the plugin storing unencrypted token in the config.xml file on the Jenkins controller. An attacker could exploit this vulnerability to view these passwords.