CVE-2019-1003066

Jenkins Bugzilla Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-1003066

CVE-2019-1003066 affects the Jenkins Bugzilla Plugin. The issue is that credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins master, specifically in hudson.plugins.bugzilla.BugzillaProjectProperty.xml, and can be viewed by any user with access to the master ...