Lucene search

K
osvGoogleOSV:GHSA-JRMF-XHR6-3428
HistoryMay 24, 2022 - 4:57 p.m.

Jenkins SourceGear Vault plugin transmits credentials in plain text

2022-05-2416:57:28
Google
osv.dev
14
jenkins
sourcegear vault
plugin
credentials
plain text
job configuration
patches
unmaintained

EPSS

0.002

Percentile

55.1%

Jenkins SourceGear Vault Plugin transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. As of the publication of the advisory, there are no patches and the plugin is unmaintained.

EPSS

0.002

Percentile

55.1%

Related for OSV:GHSA-JRMF-XHR6-3428