CVE-2018-1000104

CVE-2018-1000104 affects Jenkins Coverity Plugin at 1.10.0 and earlier, where CIMInstance.java stores passwords in plaintext. An attacker with local file-system access or control of a Jenkins administrator’s browser (e.g., a malicious extension) can retrieve the keystore and private key passwords...