CVE-2020-2126

The CVE concerns Jenkins DigitalOcean Plugin version 1.1 and earlier, which stores a token unencrypted in the global config.xml file on the Jenkins master. This allows users with access to the master filesystem to view the token. The issue is documented across multiple sources (CVE-2020-2126 entr...