Lucene search
GoogleOSV:GHSA-3CCQ-GCCX-PM7JHistoryMay 13, 2022 - 1:18 a.m.
Jenkins SonarQube Scanner Plugin stored server authentication token in plain text
2022-05-1301:18:46
Google
osv.dev
10
jenkins
sonarqube scanner plugin
authentication
plain text
local attackers
credentials
An insufficiently protected credentials vulnerability exists in Jenkins SonarQube Scanner Plugin 2.8 and earlier in SonarInstallation.java that allows attackers with local file system access to obtain the credentials used to connect to SonarQube.
Related
cvelist
cvelist
CVE-2018-1000425
2019-01-09 23:00:00
nvd
nvd
CVE-2018-1000425
2019-01-09 23:29:02
osv
osv
CVE-2018-1000425
2019-01-09 23:29:02
github
github
prion
prion
Design/Logic Flaw
2019-01-09 23:29:00
cve
cve
CVE-2018-1000425
2019-01-09 23:29:02