Lucene search
GoogleOSV:GHSA-8V72-QR3H-C6RVHistoryMay 24, 2022 - 5:39 p.m.
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
2022-05-2417:39:13
Google
osv.dev
16
jenkins
bumblebee
hp alm
plugin
credentials
plain text
global configuration
file system
encryption
security
EPSS
0
Percentile
12.6%
Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file com.agiletestware.bumblebee.BumblebeeGlobalConfig.xml on the Jenkins controller as part of its configuration.
These credentials can be viewed by users with access to the Jenkins controller file system.
Jenkins Bumblebee HP ALM Plugin 4.1.6 stores credentials encrypted once its configuration is saved again.
Related
prion
prion
Design/Logic Flaw
2021-01-13 16:15:00
cvelist
cvelist
CVE-2021-21614
2021-01-13 15:55:34
veracode
veracode
Information Disclosure
2021-01-14 16:24:27
alpinelinux
alpinelinux
CVE-2021-21614
2021-01-13 16:15:14
nvd
nvd
CVE-2021-21614
2021-01-13 16:15:14
github
github
Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin
2022-05-24 17:39:13
osv
osv
CVE-2021-21614
2021-01-13 16:15:14
cve
cve
CVE-2021-21614
2021-01-13 16:15:14
