Lucene search

K
osvGoogleOSV:GHSA-GMG2-3W6V-945P
HistoryMay 24, 2022 - 5:08 p.m.

Password stored in plain text by Parasoft Environment Manager Plugin

2022-05-2417:08:47
Google
osv.dev
9
password security jenkins parasoft environment manager plugin plain text storage unencrypted config.xml files master file system access permission software

EPSS

0.001

Percentile

28.4%

Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-GMG2-3W6V-945P