Archive
9 March 2020
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Low 3.1
Credentials transmitted in plain text by Skytap Cloud CI Plugin
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
-
Low 3.1
Credentials transmitted in plain text by Jenkins DeployHub Plugin
Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
-
Low 3.1
Credentials transmitted in plain text by OpenShift Deployer Plugin
Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
-
Low 3.1
Credentials transmitted in plain text by Backlog Plugin
Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
-
Low 3.3
Jenkins Zephyr for JIRA Test Management Plugin stores credentials in plain text
Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Jenkins master file system.
-
Low 3.1
Jenkins Quality Gates Plugin transmits credentials in plain text during configuration
Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
-
Low 3.1
Jenkins Sonar Quality Gates Plugin transmits credentials in plain text during configuration
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
-
Low 3.1
Credentials transmitted in plain text by Repository Connector Plugin
Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
-
Low 3.3
Credentials stored in plain text by Zephyr Enterprise Test Management Plugin
Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.
-
Low 3.1
Credentials transmitted in plain text by Jenkins Logstash Plugin
Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.