Lucene search
GoogleOSV:GHSA-4Q47-PH87-FQ4FHistoryMay 24, 2022 - 5:12 p.m.
Passwords stored in plain text by Jenkins Artifactory Plugin
2022-05-2417:12:40
Google
osv.dev
5
jenkins
artifactory plugin
plain text
password
global configuration
encryption
EPSS
0.001
Percentile
28.4%
Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password in plain text in the global configuration file org.jfrog.hudson.ArtifactoryBuilder.xml. This password can be viewed by users with access to the Jenkins controller file system.
Artifactory Plugin 3.6.0 now stores the Artifactory server password encrypted. This change is effective once the global configuration is saved the next time.
Related
osv
osv
BIT-artifactory-2020-2164
2024-03-06 10:53:12
CVE-2020-2164
2020-03-25 17:15:15
cve
cve
CVE-2020-2164
2020-03-25 17:15:15
nvd
nvd
CVE-2020-2164
2020-03-25 17:15:15
prion
prion
Design/Logic Flaw
2020-03-25 17:15:00
github
github
Passwords stored in plain text by Jenkins Artifactory Plugin
2022-05-24 17:12:40
cvelist
cvelist
CVE-2020-2164
2020-03-25 16:05:36