CVE-2019-10287

Jenkins YouTrack plugin (versions 0.7.1 and older) stored credentials unencrypted in the plugin’s global configuration file on the Jenkins master, allowing users with master/file system access to view them. The issue stems from inadequate trust management and plaintext storage in org.jenkinsci.pl...