Lucene search

K
osvGoogleOSV:GHSA-CG4H-CFJP-H3X2
HistoryMay 24, 2022 - 5:33 p.m.

Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin

2022-05-2417:33:09
Google
osv.dev
7
jenkins
vmware
lab manager
slaves plugin
password
plain text
config.xml file
file system
security vulnerability

EPSS

0.001

Percentile

28.4%

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-CG4H-CFJP-H3X2