Design/Logic Flaw

2020-09-0114:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

CPENameOperatorVersion
jenkinslt2.236
soapui_pro_functional_testingle1.5

CPE	Name	Operator	Version
	jenkins	lt	2.236
	soapui_pro_functional_testing	le	1.5

References

www.openwall.com/lists/oss-security/2020/09/01/3

jenkins.io/security/advisory/2020-09-01/