Lucene search
GoogleOSV:GHSA-CG6Q-GP23-VWX8HistoryMay 13, 2022 - 1:18 a.m.
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-1301:18:46
Google
osv.dev
3
jenkins
integration
plugin
credentials
vulnerability
crowd 2
local file system access
An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, CrowdConfigurationService.java that allows attackers with local file system access to obtain the credentials used to connect to Crowd 2.
Related
cvelist
cvelist
CVE-2018-1000423
2019-01-09 23:00:00
prion
prion
Design/Logic Flaw
2019-01-09 23:29:00
nvd
nvd
CVE-2018-1000423
2019-01-09 23:29:02
github
github
Jenkins Crowd 2 Integration Plugin stored credentials in plain text
2022-05-13 01:18:46
cve
cve
CVE-2018-1000423
2019-01-09 23:29:02