1 matches found
vault-scm-plugin shows plain text password in configuration form
vault-scm-plugin stores an SCM password in job configurations. While the password is stored encrypted on disk, it is transmitted in plain text as part of the configuration form. This can result in exposure of the password through browser extensions, cross-site scripting vulnerabilities, and simil...
7.5CVSS7AI score0.00887EPSS
SaveExploits0Affected Software1
20