Lucene search
GoogleOSV:GHSA-QVJR-X8FW-HGHVHistoryMay 24, 2022 - 5:39 p.m.
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
2022-05-2417:39:13
Google
osv.dev
19
jenkins
tracetronic ecu-test
credentials
plain text
configuration file
security
stored
unencrypted
global
access
migration
sensitive options.
EPSS
0
Percentile
12.6%
Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file de.tracetronic.jenkins.plugins.ecutest.report.atx.installation.ATXInstallation.xml on the Jenkins controller as part of its configuration.
These credentials can be viewed by users with access to the Jenkins controller file system.
Jenkins TraceTronic ECU-TEST Plugin 2.24 adds a new option type for sensitive options. Previously stored credentials are migrated to that option type on Jenkins startup.
Related
prion
prion
Design/Logic Flaw
2021-01-13 16:15:00
osv
osv
CVE-2021-21612
2021-01-13 16:15:14
cve
cve
CVE-2021-21612
2021-01-13 16:15:14
nvd
nvd
CVE-2021-21612
2021-01-13 16:15:14
cvelist
cvelist
CVE-2021-21612
2021-01-13 15:55:33
alpinelinux
alpinelinux
CVE-2021-21612
2021-01-13 16:15:14
veracode
veracode
Information Disclosure
2021-01-14 16:24:29
github
github
Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin
2022-05-24 17:39:13
