CVE-2020-2132

2020-02-1215:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

CPENameOperatorVersion
environment-manager-tools-plugineqenvironment-manager-2.7
environment-manager-tools-plugineqenvironment-manager-2.14
environment-manager-tools-plugineqenvironment-manager-2.13
environment-manager-tools-plugineqenvironment-manager-2.12
environment-manager-tools-plugineqenvironment-manager-2.3
environment-manager-tools-plugineqenvironment-manager-2.4
environment-manager-tools-plugineqenvironment-manager-2.11
environment-manager-tools-plugineqenvironment-manager-2.6
environment-manager-tools-plugineqenvironment-manager-2.8
environment-manager-tools-plugineqenvironment-manager-2.10

Name	Operator	Version
environment-manager-tools-plugin	eq	environment-manager-2.7
environment-manager-tools-plugin	eq	environment-manager-2.14
environment-manager-tools-plugin	eq	environment-manager-2.13
environment-manager-tools-plugin	eq	environment-manager-2.12
environment-manager-tools-plugin	eq	environment-manager-2.3
environment-manager-tools-plugin	eq	environment-manager-2.4
environment-manager-tools-plugin	eq	environment-manager-2.11
environment-manager-tools-plugin	eq	environment-manager-2.6
environment-manager-tools-plugin	eq	environment-manager-2.8
environment-manager-tools-plugin	eq	environment-manager-2.10