Lucene search
GoogleOSV:GHSA-8V72-QR3H-C6RVHistoryMay 24, 2022 - 5:39 p.m.
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
2022-05-2417:39:13
Google
osv.dev
10
0.0004 Low
EPSS
Percentile
12.7%
Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file com.agiletestware.bumblebee.BumblebeeGlobalConfig.xml on the Jenkins controller as part of its configuration.
These credentials can be viewed by users with access to the Jenkins controller file system.
Jenkins Bumblebee HP ALM Plugin 4.1.6 stores credentials encrypted once its configuration is saved again.
Related
cve
cve
CVE-2021-21614
2021-01-13 16:15:14
prion
prion
Design/Logic Flaw
2021-01-13 16:15:00
cvelist
cvelist
CVE-2021-21614
2021-01-13 15:55:34
osv
osv
CVE-2021-21614
2021-01-13 16:15:14
veracode
veracode
Information Disclosure
2021-01-14 16:24:27
nvd
nvd
CVE-2021-21614
2021-01-13 16:15:14
alpinelinux
alpinelinux
CVE-2021-21614
2021-01-13 16:15:14
github
github
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
2022-05-24 17:39:13
