CVE-2019-1003060

CVE-2019-1003060 affects the Jenkins Official OWASP ZAP Plugin. The issue is that credentials are stored in plaintext in the plugin’s global configuration file (org.jenkinsci.plugins.zap.ZAPBuilder.xml) on the Jenkins controller/master, allowing any user with access to the master filesystem to vi...