Lucene search
GoogleOSV:GHSA-M365-98J8-W96WHistoryMay 24, 2022 - 5:10 p.m.
Jenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text
2022-05-2417:10:29
Google
osv.dev
11
jenkins
zephyr
jira
test management
plugin
credentials
plain text
global configuration file
security issue
unencrypted
file system access
EPSS
0
Percentile
12.6%
Zephyr for JIRA Test Management Plugin 1.5 and earlier stores Jira credentials unencrypted in its global configuration file com.thed.zephyr.jenkins.reporter.ZfjReporter.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system.
Related
nvd
nvd
CVE-2020-2154
2020-03-09 16:15:14
osv
osv
CVE-2020-2154
2020-03-09 16:15:14
cvelist
cvelist
CVE-2020-2154
2020-03-09 15:01:04
cve
cve
CVE-2020-2154
2020-03-09 16:15:14
github
github
prion
prion
Design/Logic Flaw
2020-03-09 16:15:00