Information Disclosure

Jenkins Repository Connector is vulnerable information disclosure. Usernames and passwords are stored in plaintext in its global configuration file on the Jenkins master. A local user will be able to retrieve the information and gain access to the application as other users.