CVE-2022-36901

CVE-2022-36901 affects the Jenkins HTTP Request Plugin (versions 1.15 and earlier). The root issue is that HTTP request passwords are stored unencrypted in the plugin’s global configuration file on the Jenkins controller, which allows any user with access to the Jenkins controller file system to ...