CVE-2020-2314

The CVE-2020-2314 issue affects Jenkins AppSpider Plugin 1.0.12 and earlier, where the plugin stores a password unencrypted in the global configuration file on the Jenkins controller. The password is stored in com.rapid7.jenkinspider.PostBuildScan.xml and can be viewed by users with filesystem ac...

CVE-2020-2314

Jenkins AppSpider Plugin 1.0.12 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

PT-2020-15547 · Jenkins · Jenkins Appspider Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins AppSpider Plugin versions 1.0.12 and earlier Description: The issue concerns the storage of a password in an unencrypted form in the global configuration file on the Jenkins controller. This password can be viewed by users with access...