Lucene search

K
osvGoogleOSV:GHSA-CHM8-WP3H-F4M3
HistoryMay 24, 2022 - 4:43 p.m.

Jenkins jira-ext Plugin stores credentials unencrypted

2022-05-2416:43:53
Google
osv.dev
7
jenkins
jira-ext plugin
credentials
unencrypted
global configuration
file system
software

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

41.3%

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file hudson.plugins.jira.JiraProjectProperty.xml on the Jenkins master. These credentials could be viewed by users with access to the Jenkins master file system.

jira-ext Plugin version 0.9 stores credentials encrypted.

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

41.3%

Related for OSV:GHSA-CHM8-WP3H-F4M3