Lucene search
GoogleOSV:GHSA-JMP9-F42Q-4G85HistoryMay 24, 2022 - 5:08 p.m.
Passwords stored in plain text by Harvest SCM Plugin
2022-05-2417:08:48
Google
osv.dev
4
0.001 Low
EPSS
Percentile
28.6%
Harvest SCM Plugin 0.5.1 and earlier stores SCM passwords unencrypted in its global configuration file hudson.plugins.harvest.HarvestSCM.xml and in job config.xml files on the Jenkins controller. These credentials can be viewed by users with Extended Read permission (job config.xml only) or access to the Jenkins controller file system (both).
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:harvest | eq | 0.4.2 | |
| org.jenkins-ci.plugins:harvest | eq | 0.5.1 | |
| org.jenkins-ci.plugins:harvest | eq | 0.5 |
Related
osv
osv
CVE-2020-2130
2020-02-12 15:15:14
cvelist
cvelist
CVE-2020-2130
2020-02-12 14:35:49
nvd
nvd
CVE-2020-2130
2020-02-12 15:15:14
cve
cve
CVE-2020-2130
2020-02-12 15:15:14
prion
prion
Design/Logic Flaw
2020-02-12 15:15:00
github
github
Passwords stored in plain text by Harvest SCM Plugin
2022-05-24 17:08:48