CVE-2020-2126

2020-02-1215:15:14

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins DigitalOcean Plugin 1.1 and earlier stores a token unencrypted in the global config.xml file on the Jenkins master where it can be viewed by users with access to the master file system.

CPENameOperatorVersion
digitalocean-plugineqdigitalocean-plugin-0.18
digitalocean-plugineqdigitalocean-plugin-1.1
digitalocean-plugineqdigitalocean-plugin-0.19
digitalocean-plugineqdigitalocean-plugin-0.19.1
digitalocean-plugineqdigitalocean-plugin-0.9
digitalocean-plugineqdigitalocean-plugin-0.14.1
digitalocean-plugineqdigitalocean-plugin-1.0
digitalocean-plugineqdigitalocean-plugin-0.3
digitalocean-plugineqdigitalocean-plugin-0.2
digitalocean-plugineqdigitalocean-plugin-0.17

Name	Operator	Version
digitalocean-plugin	eq	digitalocean-plugin-0.18
digitalocean-plugin	eq	digitalocean-plugin-1.1
digitalocean-plugin	eq	digitalocean-plugin-0.19
digitalocean-plugin	eq	digitalocean-plugin-0.19.1
digitalocean-plugin	eq	digitalocean-plugin-0.9
digitalocean-plugin	eq	digitalocean-plugin-0.14.1
digitalocean-plugin	eq	digitalocean-plugin-1.0
digitalocean-plugin	eq	digitalocean-plugin-0.3
digitalocean-plugin	eq	digitalocean-plugin-0.2
digitalocean-plugin	eq	digitalocean-plugin-0.17