Lucene search
GoogleOSV:GHSA-7JX8-244G-JFPXHistoryMay 13, 2022 - 1:17 a.m.
Jenkins OWASP ZAP Plugin stores unencrypted credentials
2022-05-1301:17:45
Google
osv.dev
4
jenkins
owasp zap plugin
unencrypted credentials
jira
global configuration file
file system
security
Jenkins Official OWASP ZAP Plugin stores Jira credentials unencrypted in its global configuration file org.jenkinsci.plugins.zap.ZAPBuilder.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system.
Related
prion
prion
Design/Logic Flaw
2019-04-04 16:29:00
nvd
nvd
CVE-2019-1003060
2019-04-04 16:29:00
github
github
Jenkins OWASP ZAP Plugin stores unencrypted credentials
2022-05-13 01:17:45
cve
cve
CVE-2019-1003060
2019-04-04 16:29:00
cvelist
cvelist
CVE-2019-1003060
2019-04-04 15:38:48
alpinelinux
alpinelinux
CVE-2019-1003060
2019-04-04 16:29:00