CVE-2020-2218

2020-07-0215:15:18

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

CPENameOperatorVersion
hp-quality-center-plugineqhp-quality-center-1.0.1
hp-quality-center-plugineqhp-quality-center-1.6
hp-quality-center-plugineqhp-quality-center-1.4
hp-quality-center-plugineqhp-quality-center-1.3
hp-quality-center-plugineqhp-quality-center-1.2
hp-quality-center-plugineqhp-quality-center-1.5

Name	Operator	Version
hp-quality-center-plugin	eq	hp-quality-center-1.0.1
hp-quality-center-plugin	eq	hp-quality-center-1.6
hp-quality-center-plugin	eq	hp-quality-center-1.4
hp-quality-center-plugin	eq	hp-quality-center-1.3
hp-quality-center-plugin	eq	hp-quality-center-1.2
hp-quality-center-plugin	eq	hp-quality-center-1.5