Package · Maven

com.redgate.plugins.redgatesqlci:redgate-sql-ci

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 4.3

CVE-2020-2095

Redgate SQL Change Automation Plugin stored credentials in plain text

Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Jenkins Project Jenkins Redgate SQL Change Automation Plugin com.redgate.plugins.redgatesqlci:redgate-sql-ci Web / CMS Maven

Jan 15, 2020
Medium 6.5

CVE-2019-16557

Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials

Jenkins Redgate SQL Change Automation Plugin 2.0.3 and earlier stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.

Jenkins Project Jenkins Redgate SQL Change Automation Plugin com.redgate.plugins.redgatesqlci:redgate-sql-ci Web / CMS Maven

Dec 17, 2019