Skip to content
OpenAdvisories
Low · 3.1 CVE-2019-16545 EUVD-2022-2958GHSA-793w-q2h5-8h5j

Jenkins QMetry for JIRA Plugin shows plain text password in configuration form

Published Nov 21, 2019 · Updated Aug 5, 2024 · Assigned by jenkins

Description

Jenkins QMetry for JIRA - Test Management Plugin transmits credentials in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins QMetry for JIRA - Test Management Plugin 1.13 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:qmetry-for-jira-test-management < 1.14.0 1.14.0 GHSA-793w-q2h5-8h5j

References