CVE-2020-2153

2020-03-0916:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

CPENameOperatorVersion
backlog-plugineqbacklog-1.8
backlog-plugineqbacklog-2.0
backlog-plugineqbacklog-1.10
backlog-plugineqbacklog-2.3
backlog-plugineqbacklog-1.7
backlog-plugineqbacklog-2.2
backlog-plugineqbacklog-1.9
backlog-plugineqbacklog-2.4
backlog-plugineqbacklog-1.2
backlog-plugineqbacklog-1.5

Name	Operator	Version
backlog-plugin	eq	backlog-1.8
backlog-plugin	eq	backlog-2.0
backlog-plugin	eq	backlog-1.10
backlog-plugin	eq	backlog-2.3
backlog-plugin	eq	backlog-1.7
backlog-plugin	eq	backlog-2.2
backlog-plugin	eq	backlog-1.9
backlog-plugin	eq	backlog-2.4
backlog-plugin	eq	backlog-1.2
backlog-plugin	eq	backlog-1.5