4197 matches found
CVE-2020-2156
The CVE-2020-2156 issue affects Jenkins DeployHub Plugin (up to and including 8.0.14). The root cause is that credentials are transmitted in plain text as part of job configuration forms and, although encrypted on disk in config.xml, can be viewed by users with Extended Read permission, potential...
CVE-2020-2156
Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2156
Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2155
Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2156
Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2153
Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2154
Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...
CVE-2020-2153
Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure...
CVE-2020-2154
Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system...
CVE-2020-2151
Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2151
CVE-2020-2151 affects Jenkins Quality Gates Plugin versions 2.5 and earlier. The root cause is that credentials configured in the plugin’s global Jenkins configuration form are transmitted in plain text, potentially exposing them (e.g., via browser extensions or similar vectors). Impact stated as...
CVE-2020-2151
Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2149
Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2150
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2150
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...
CVE-2020-2145
Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...
CVE-2020-2145
Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system...
CVE-2020-2145
CVE-2020-2145 affects Jenkins Zephyr Enterprise Test Management Plugin (versions ≤ 1.9.1). The vulnerability stems from storing the Zephyr password in plaintext on the Jenkins master filesystem, specifically in the global configuration file ZeeReporter.xml, allowing users with access to the contr...
CVE-2020-2143
Summary of CVE-2020-2143 (Jenkins Logstash Plugin): Jenkins Logstash Plugin versions up to 2.3.1 transmit credentials in plain text via the global Jenkins configuration form, creating exposure risk (e.g., through browser extensions or XSS). The issue stems from how credentials are handled in the ...