Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:8 p.m.25 views

Credential stored in plain text by BMC Release Package and Deployment Plugin

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. As of publication of this advisory, there is no fix...

4.3CVSS4.9AI score0.00031EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/24 5:8 p.m.17 views

GHSA-2J3R-X6XC-QQQJ Credential stored in plain text by BMC Release Package and Deployment Plugin

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system. As of publication of this advisory, there is no fix...

3.3CVSS4.4AI score0.00031EPSS
Exploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/24 12:0 a.m.26 views

Insufficiently Protected Credentials

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

4.3CVSS3.9AI score0.00031EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2020/03/09 12:0 a.m.3 views

CloudBees Jenkins BMC Release Package and Deployment Plugin Code Execution Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A security vulnerability exis...

4.3CVSS6.8AI score0.00031EPSS
Exploits0References1
OSV
OSV
added 2020/02/12 3:15 p.m.13 views

CVE-2020-2127

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

4.3CVSS6.7AI score
Exploits0References2
Prion
Prion
added 2020/02/12 3:15 p.m.19 views

Design/Logic Flaw

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

4CVSS4.5AI score0.00031EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder