Lucene search
GoogleOSV:GHSA-R798-QX7R-V3GWHistoryMay 13, 2022 - 1:17 a.m.
Jenkins Octopus Deploy Plugin stores credentials in plain text
2022-05-1301:17:42
Google
osv.dev
6
jenkins
octopus deploy
plugin
credentials
plain text
configuration file
security issue
Jenkins Octopus Deploy Plugin stores credentials unencrypted in its global configuration file hudson.plugins.octopusdeploy.OctopusDeployPlugin.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system.
Related
prion
prion
Design/Logic Flaw
2019-04-04 16:29:00
cvelist
cvelist
CVE-2019-1003071
2019-04-04 15:38:48
alpinelinux
alpinelinux
CVE-2019-1003071
2019-04-04 16:29:01
github
github
Jenkins Octopus Deploy Plugin stores credentials in plain text
2022-05-13 01:17:42
cve
cve
CVE-2019-1003071
2019-04-04 16:29:01
nvd
nvd
CVE-2019-1003071
2019-04-04 16:29:01