Lucene search
GoogleOSV:GHSA-X75R-G63M-82WJHistoryMar 16, 2022 - 12:00 a.m.
Passwords stored in plain text by Jenkins dbCharts Plugin
2022-03-1600:00:43
Google
osv.dev
5
0.001 Low
EPSS
Percentile
28.6%
Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file hudson.plugins.dbcharts.DbChartPublisher.xml on the Jenkins controller as part of its configuration.
These passwords can be viewed by users with access to the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:dbcharts | eq | 0.5.2 |
Related
prion
prion
Design/Logic Flaw
2022-03-15 17:15:00
cvelist
cvelist
CVE-2022-27216
2022-03-15 16:46:08
nvd
nvd
CVE-2022-27216
2022-03-15 17:15:12
cve
cve
CVE-2022-27216
2022-03-15 17:15:12
cnvd
cnvd
Jenkins dbCharts Plugin Information Disclosure Vulnerability
2022-03-17 00:00:00
github
github
Passwords stored in plain text by Jenkins dbCharts Plugin
2022-03-16 00:00:43
