Lucene search
GoogleOSV:GHSA-XCP5-J5FJ-3XP6HistoryJun 24, 2022 - 12:00 a.m.
User passwords stored in plain text by Jenkins EasyQA Plugin
2022-06-2400:00:31
Google
osv.dev
8
0.001 Low
EPSS
Percentile
28.4%
EasyQA Plugin 1.0 and earlier stores user passwords unencrypted in its global configuration file EasyQAPluginProperties.xml on the Jenkins controller as part of its configuration.
These passwords can be viewed by users with access to the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.geteasyqa:easyqa | eq | 1.0 |
Related
prion
prion
Design/Logic Flaw
2022-06-23 17:15:00
cve
cve
CVE-2022-34202
2022-06-23 17:15:17
cvelist
cvelist
CVE-2022-34202
2022-06-22 14:41:40
nvd
nvd
CVE-2022-34202
2022-06-23 17:15:17
github
github
User passwords stored in plain text by Jenkins EasyQA Plugin
2022-06-24 00:00:31
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00
Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 Multiple Vulnerabilities
2022-07-15 00:00:00