1 matches found
SonarQube Scanner Plugin stored server authentication token in plain text
SonarQube Scanner Plugin stored a server authentication token unencrypted in its global configuration file on the Jenkins controller. This token could be viewed by users with access to the Jenkins controller file system. The plugin now stores the token encrypted in the configuration files on disk...
7.8CVSS7.4AI score0.00344EPSS
SaveExploits0Affected Software1
20