Lucene search
GoogleOSV:GHSA-6PQM-PP65-MC26HistoryMay 24, 2022 - 10:00 p.m.
Jenkins Gem Publisher Plugin stores credentials as plaintext
2022-05-2422:00:44
Google
osv.dev
2
jenkins
gem publisher
plaintext credentials
vulnerability
global configuration
file system
software security
EPSS
0
Percentile
12.6%
Jenkins Gem Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Related
cvelist
cvelist
CVE-2019-10426
2019-09-25 15:05:34
nvd
nvd
CVE-2019-10426
2019-09-25 16:15:11
cve
cve
CVE-2019-10426
2019-09-25 16:15:11
github
github
Jenkins Gem Publisher Plugin stores credentials as plaintext
2022-05-24 22:00:44
prion
prion
Design/Logic Flaw
2019-09-25 16:15:00