Lucene search

K
osvGoogleOSV:GHSA-Q2WV-M3PQ-XPV9
HistoryMay 24, 2022 - 5:10 p.m.

Credentials transmitted in plain text by Skytap Cloud CI Plugin

2022-05-2417:10:30
Google
osv.dev
11
skytap cloud
ci plugin
credentials
plain text
configuration form
encrypted
disk
security issue
user permission

EPSS

0.001

Percentile

22.0%

Skytap Cloud CI Plugin stores credentials in job config.xml files as part of its configuration.

While the credentials are stored encrypted on disk, they are transmitted in plain text as part of the configuration form by Skytap Cloud CI Plugin 2.07 and earlier. These credentials could be viewed by users with Extended Read permission.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-Q2WV-M3PQ-XPV9