CVE-2020-2212

CVE-2020-2212 affects Jenkins GitHub Coverage Reporter Plugin ≤1.8, with secrets stored unencrypted in the global configuration on the Jenkins master. The GitHub access token is saved in io.jenkins.plugins.gcr.PluginConfiguration.xml and can be viewed by anyone with master-file-system access or r...