Plaintext Storage of a Password in Jenkins Eagle Tester Plugin

2022-05-2417:08:47

Google

osv.dev

0.001 Low

EPSS

Percentile

28.5%

JSON

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

CPENameOperatorVersion
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.5
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.3
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.6
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.8
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.2
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.4
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.1
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.9
com.mobileenerlytics.eagle.tester:eagle-testereq1.0.7

Name	Operator	Version
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.5
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.3
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.6
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.8
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.2
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.4
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.1
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.9
com.mobileenerlytics.eagle.tester:eagle-tester	eq	1.0.7