CVE-2022-34809

Jenkins RQM Plugin 2.8 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

CVE-2022-34809

CVE-2022-34809 affects Jenkins RQM Plugin (versions 2.8 and earlier). Root cause: passwords stored unencrypted in the plugin’s global configuration file on the Jenkins controller (net.praqma.jenkins.rqm.RqmBuilder.xml), viewable by users with access to the controller filesystem. Impact: password ...