Package · Maven

ru.yandex.jenkins.plugins.debuilder:debian-package-builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Low 3.3

CVE-2020-2125

Credentials stored in plain text by debian-package-builder Plugin

Jenkins Debian Package Builder Plugin 1.6.11 and earlier stores a GPG passphrase unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

Jenkins Project Jenkins Debian Package Builder Plugin ru.yandex.jenkins.plugins.debuilder:debian-package-builder Web / CMS Maven

Feb 12, 2020