1 matches found
Password stored in plain text by reverse-proxy-auth-plugin
reverse-proxy-auth-plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller as part of its configuration. This password can be viewed by attackers with access to the Jenkins controller file system. reverse-proxy-auth-plugin 1.7....
6.5CVSS6.4AI score0.00692EPSS
SaveExploits0Affected Software1
20