Command injection

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...

CVE-2019-16545

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure...

CVE-2019-16545

CVE-2019-16545 affects Jenkins QMetry for JIRA - Test Management Plugin. The issue is that credentials are transmitted in plain text as part of job configuration forms, which can lead to exposure. Connected sources indicate that passwords are stored encrypted on disk since version 1.13, but the p...

CVE-2019-16544

CVE-2019-16544 affects Jenkins QMetry for JIRA - Test Management Plugin (versions ≤ 1.12). The root cause is that credentials were stored in clear text in job config.xml files on the Jenkins master/controller, making them viewable by users with Extended Read permission or by someone with access t...

CVE-2019-16544

Jenkins QMetry for JIRA - Test Management Plugin 1.12 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system...

PT-2019-14700 · Jenkins · Jenkins Qmetry For Jira - Test Management Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins QMetry for JIRA - Test Management Plugin versions prior to 1.13 Description: The issue concerns the transmission of credentials in plain text as part of job configuration forms, potentially leading to their exposure. Although the...