CVE-2020-2129

2020-02-1215:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

CPENameOperatorVersion
eagle-tester-plugineqeagle-tester-1.0.3
eagle-tester-plugineqeagle-tester-1.0.1
eagle-tester-plugineqeagle-tester-1.0
eagle-tester-plugineqeagle-tester-1.0.7
eagle-tester-plugineqeagle-tester-1.0.4
eagle-tester-plugineqeagle-tester-1.0.9
eagle-tester-plugineqeagle-tester-1.0.6
eagle-tester-plugineqeagle-tester-1.0.8
eagle-tester-plugineqeagle-tester-1.0.5
eagle-tester-plugineqeagle-tester-1.0.2

Name	Operator	Version
eagle-tester-plugin	eq	eagle-tester-1.0.3
eagle-tester-plugin	eq	eagle-tester-1.0.1
eagle-tester-plugin	eq	eagle-tester-1.0
eagle-tester-plugin	eq	eagle-tester-1.0.7
eagle-tester-plugin	eq	eagle-tester-1.0.4
eagle-tester-plugin	eq	eagle-tester-1.0.9
eagle-tester-plugin	eq	eagle-tester-1.0.6
eagle-tester-plugin	eq	eagle-tester-1.0.8
eagle-tester-plugin	eq	eagle-tester-1.0.5
eagle-tester-plugin	eq	eagle-tester-1.0.2