CVE-2020-2319

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier stores a password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2020-2319

CVE-2020-2319 affects Jenkins VMware Lab Manager Slaves Plugin versions 0.2.8 and earlier. The underlying issue is that a password is stored in plain text in the global config.xml on the Jenkins controller, making it viewable by anyone with access to the controller’s filesystem. The impact is exp...