Lucene search
GoogleOSV:GHSA-485Q-V457-3P58HistoryMay 24, 2022 - 5:33 p.m.
Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
2022-05-2417:33:09
Google
osv.dev
12
mail commander plugin
jenkins-ci plugin
passwords stored
plain text
job config.xml
unencrypted
jenkins controller
extended read permission
file system access
EPSS
0.001
Percentile
28.4%
Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Related
prion
prion
Design/Logic Flaw
2020-11-04 15:15:00
osv
osv
CVE-2020-2318
2020-11-04 15:15:12
nvd
nvd
CVE-2020-2318
2020-11-04 15:15:12
github
github
cve
cve
CVE-2020-2318
2020-11-04 15:15:12
cvelist
cvelist
CVE-2020-2318
2020-11-04 14:35:45