Lucene search
GoogleOSV:GHSA-W6C2-JRHH-JRXGHistoryMay 24, 2022 - 5:27 p.m.
Credentials stored in plain text by Jenkins tfs Plugin
2022-05-2417:27:06
Google
osv.dev
10
jenkins
tfs plugin
credentials
plain text
webhook secret
unencrypted
global configuration file
attackers
access
file system
security vulnerability
EPSS
0
Percentile
12.6%
tfs Plugin 5.157.1 and earlier stores a webhook secret unencrypted in its global configuration file hudson.plugins.tfs.TeamPluginGlobalConfig.xml on the Jenkins controller as part of its configuration. This secret can be viewed by attackers with access to the Jenkins controller file system.
Related
cvelist
cvelist
CVE-2020-2249
2020-09-01 13:50:35
osv
osv
CVE-2020-2249
2020-09-01 14:15:13
prion
prion
Design/Logic Flaw
2020-09-01 14:15:00
alpinelinux
alpinelinux
CVE-2020-2249
2020-09-01 14:15:13
github
github
Credentials stored in plain text by Jenkins tfs Plugin
2022-05-24 17:27:06
cve
cve
CVE-2020-2249
2020-09-01 14:15:13
nvd
nvd
CVE-2020-2249
2020-09-01 14:15:13