Lucene search
GoogleOSV:GHSA-7HP3-5W4X-8F7CHistoryMay 24, 2022 - 4:58 p.m.
Jenkins SOASTA CloudTest Plugin stores API token in plain text
2022-05-2416:58:50
Google
osv.dev
5
jenkins
soasta cloudtest
plugin
api token
unencrypted
global configuration
credentials
file system
advisory
publication
Jenkins SOASTA CloudTest Plugin stores credentials unencrypted in its global configuration file com.soasta.jenkins.CloudTestServer.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system.
As of publication of this advisory there is no fix.
Related
cvelist
cvelist
CVE-2019-10451
2019-10-16 13:00:51
nvd
nvd
CVE-2019-10451
2019-10-16 14:15:13
prion
prion
Design/Logic Flaw
2019-10-16 14:15:00
cve
cve
CVE-2019-10451
2019-10-16 14:15:13
github
github
Jenkins SOASTA CloudTest Plugin stores API token in plain text
2022-05-24 16:58:50