CVE-2020-2119

2020-02-1215:15:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

CPENameOperatorVersion
azure-ad-plugineqazure-ad-1.0.0
azure-ad-plugineqazure-ad-0.2.0
azure-ad-plugineqazure-ad-0.3.1
azure-ad-plugineqazure-ad-0.1.1-1
azure-ad-plugineqazure-ad-0.3.4
azure-ad-plugineqazure-ad-1.1.2
azure-ad-plugineqazure-ad-0.3.3
azure-ad-plugineqazure-ad-0.1.1
azure-ad-plugineqazure-ad-0.3.2
azure-ad-plugineqazure-ad-0.3.0

Name	Operator	Version
azure-ad-plugin	eq	azure-ad-1.0.0
azure-ad-plugin	eq	azure-ad-0.2.0
azure-ad-plugin	eq	azure-ad-0.3.1
azure-ad-plugin	eq	azure-ad-0.1.1-1
azure-ad-plugin	eq	azure-ad-0.3.4
azure-ad-plugin	eq	azure-ad-1.1.2
azure-ad-plugin	eq	azure-ad-0.3.3
azure-ad-plugin	eq	azure-ad-0.1.1
azure-ad-plugin	eq	azure-ad-0.3.2
azure-ad-plugin	eq	azure-ad-0.3.0