CVE-2020-2156

The CVE-2020-2156 issue affects Jenkins DeployHub Plugin (up to and including 8.0.14). The root cause is that credentials are transmitted in plain text as part of job configuration forms and, although encrypted on disk in config.xml, can be viewed by users with Extended Read permission, potential...

CVE-2019-10286

The CVE-2019-10286 issue concerns the Jenkins DeployHub Plugin storing credentials in plaintext in job config.xml files on the Jenkins master/controller. This can allow users with Extended Read permission or users with filesystem access to view sensitive credentials. The Connected documents confi...