1 matches found
git-changelog stored credentials in plain text
git-changelog stored MediaWiki and Jira passwords unencrypted in job config.xml files on the Jenkins controller. These passwords could be viewed by users with Extended Read permission, or access to the Jenkins controller file system. git-changelog now stores these passwords encrypted. Existing jo...
6.5CVSS5.7AI score0.01038EPSS
SaveExploits0Affected Software1
20