Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:sonar

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2013-5676 Public exploit

    Jenkins SonarQube Plugin Stores Passwords in Cleartext

    The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

    org.jenkins-ci.plugins:sonar Maven