Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28996
HistoryJan 14, 2021 - 4:24 p.m.

Information Disclosure

2021-01-1416:24:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
jenkins
tracetronic
ecu-test
information disclosure
credentials
unencrypted
global configuration
file system
confidential information

EPSS

0

Percentile

12.6%

Jenkins TraceTronic ECU-TEST Plugin is vulnerable to information disclosure. Credentials are stored unencrypted in its global configuration file. Users with access to the Jenkins controller file system are able to access the confidential information.

EPSS

0

Percentile

12.6%