PT-2022-18305 · Vmware +1 · Vmware Vrealize Codestream Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Vmware vRealize CodeStream Plugin versions 1.2 and earlier Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. Users with Extended Read permission or access to the Jenkin...