Jenkins youtrack-plugin Plugin stored credentials in plain text

2022-05-1301:15:06

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

Jenkins youtrack-plugin Plugin stored credentials unencrypted in its global configuration file org.jenkinsci.plugins.youtrack.YouTrackProjectProperty.xml on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system.

youtrack-plugin Plugin now stores credentials encrypted.

CPENameOperatorVersion
org.jenkins-ci.plugins:youtrack-plugineq0.5-beta-2
org.jenkins-ci.plugins:youtrack-plugineq0.5-beta3
org.jenkins-ci.plugins:youtrack-plugineq0.6.3
org.jenkins-ci.plugins:youtrack-plugineq0.6.4-beta
org.jenkins-ci.plugins:youtrack-plugineq0.6
org.jenkins-ci.plugins:youtrack-plugineq0.3
org.jenkins-ci.plugins:youtrack-plugineq0.2
org.jenkins-ci.plugins:youtrack-plugineq0.6.0-beta2
org.jenkins-ci.plugins:youtrack-plugineq0.7.1
org.jenkins-ci.plugins:youtrack-plugineq0.6.0-beta1

Name	Operator	Version
org.jenkins-ci.plugins:youtrack-plugin	eq	0.5-beta-2
org.jenkins-ci.plugins:youtrack-plugin	eq	0.5-beta3
org.jenkins-ci.plugins:youtrack-plugin	eq	0.6.3
org.jenkins-ci.plugins:youtrack-plugin	eq	0.6.4-beta
org.jenkins-ci.plugins:youtrack-plugin	eq	0.6
org.jenkins-ci.plugins:youtrack-plugin	eq	0.3
org.jenkins-ci.plugins:youtrack-plugin	eq	0.2
org.jenkins-ci.plugins:youtrack-plugin	eq	0.6.0-beta2
org.jenkins-ci.plugins:youtrack-plugin	eq	0.7.1
org.jenkins-ci.plugins:youtrack-plugin	eq	0.6.0-beta1