CVE-2020-2156

2020-03-0916:15:14

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

CPENameOperatorVersion
deployhub-plugineqdeployhub-8.0.2
deployhub-plugineqdeployhub-8.0.1
deployhub-plugineqdeployhub-8.0.5
deployhub-plugineqdeployhub-8.0.8
deployhub-plugineqdeployhub-8.0.13
deployhub-plugineq7.5.0
deployhub-plugineqdeployhub-8.0.12
deployhub-plugineqdeploy-hub-8.0.0
deployhub-plugineqdeployhub-8.0.7
deployhub-plugineqdeployhub-8.0.3

Name	Operator	Version
deployhub-plugin	eq	deployhub-8.0.2
deployhub-plugin	eq	deployhub-8.0.1
deployhub-plugin	eq	deployhub-8.0.5
deployhub-plugin	eq	deployhub-8.0.8
deployhub-plugin	eq	deployhub-8.0.13
deployhub-plugin	eq	7.5.0
deployhub-plugin	eq	deployhub-8.0.12
deployhub-plugin	eq	deploy-hub-8.0.0
deployhub-plugin	eq	deployhub-8.0.7
deployhub-plugin	eq	deployhub-8.0.3