Lucene search
GoogleOSV:GHSA-QJ7P-9HGF-X8J7HistoryMay 24, 2022 - 5:08 p.m.
Passwords stored in plain text by Harvest SCM Plugin
2022-05-2417:08:48
Google
osv.dev
7
0.001 Low
EPSS
Percentile
28.6%
Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:harvest | eq | 0.4.2 | |
| org.jenkins-ci.plugins:harvest | eq | 0.5.1 | |
| org.jenkins-ci.plugins:harvest | eq | 0.5 |
Related
prion
prion
Design/Logic Flaw
2020-02-12 15:15:00
osv
osv
CVE-2020-2131
2020-02-12 15:15:14
github
github
Passwords stored in plain text by Harvest SCM Plugin
2022-05-24 17:08:48
nvd
nvd
CVE-2020-2131
2020-02-12 15:15:14
cve
cve
CVE-2020-2131
2020-02-12 15:15:14
cvelist
cvelist
CVE-2020-2131
2020-02-12 14:35:49