Jenkins GitLab Authentication Plugin Information Disclosure Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.The Jenkins GitLab Authentication Plugin is vulnerable to an information disclosure vulnerability that stems from storing unencrypted GitLab client passwords in the global config. xml file on the Jenkins controller, which can be exploited by an attacker to view the file.