CVE-2019-10385

Jenkins eggPlant Plugin 2.2 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master, enabling disclosure to users with Extended Read permission or access to the master filesystem. This is a credentials-情報 disclosure vulnerability affecting the plugin, with the roo...