Lucene search

K
osvGoogleOSV:GHSA-G2RP-QWRQ-QQQQ
HistoryMay 13, 2022 - 1:17 a.m.

Jenkins Open STF Plugin stores credentials in plain text

2022-05-1301:17:42
Google
osv.dev
4
jenkins
stf plugin
credentials
unencrypted
global configuration
file system
master

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

51.7%

Jenkins Open STF Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

51.7%

Related for OSV:GHSA-G2RP-QWRQ-QQQQ