CVE-2020-2125

2020-02-1215:15:13

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

CPENameOperatorVersion
debian-package-builder-plugineqdebian-package-builder-1.5.5
debian-package-builder-plugineqdebian-package-builder-1.6.9
debian-package-builder-plugineqdebian-package-builder-1.4.2
debian-package-builder-plugineqdebian-package-builder-1.5.7
debian-package-builder-plugineqdebian-package-builder-1.4
debian-package-builder-plugineqdebian-package-builder-1.2
debian-package-builder-plugineqdebian-package-builder-1.6.2
debian-package-builder-plugineqdebian-package-builder-1.6.3
debian-package-builder-plugineqdebian-package-builder-1.3
debian-package-builder-plugineqdebian-package-builder-1.4.1

Name	Operator	Version
debian-package-builder-plugin	eq	debian-package-builder-1.5.5
debian-package-builder-plugin	eq	debian-package-builder-1.6.9
debian-package-builder-plugin	eq	debian-package-builder-1.4.2
debian-package-builder-plugin	eq	debian-package-builder-1.5.7
debian-package-builder-plugin	eq	debian-package-builder-1.4
debian-package-builder-plugin	eq	debian-package-builder-1.2
debian-package-builder-plugin	eq	debian-package-builder-1.6.2
debian-package-builder-plugin	eq	debian-package-builder-1.6.3
debian-package-builder-plugin	eq	debian-package-builder-1.3
debian-package-builder-plugin	eq	debian-package-builder-1.4.1