Skip to content
OpenAdvisories
Low · 3.3 CVE-2020-2145 EUVD-2022-5857GHSA-xv58-gp43-6m76

Credentials stored in plain text by Zephyr Enterprise Test Management Plugin

Published Mar 9, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Zephyr Enterprise Test Management Plugin Package: org.jenkins-ci.plugins:zephyr-enterprise-test-management Category: Web / CMS Ecosystem: Maven

Description

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Zephyr Enterprise Test Management Plugin unspecified – ≤ 1.9.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:zephyr-enterprise-test-management < 1.10 1.10 GHSA-xv58-gp43-6m76

References