1 matches found
Passwords stored in plain text by http_request
httprequest 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file jenkins.plugins.httprequest.HttpRequest.xml on the Jenkins controller as part of its configuration when using deprecated Basic/Digest Authentication. These passwords can be viewed by users with...
6.5CVSS6.4AI score0.00864EPSS
SaveExploits0Affected Software1
20