Description

Jenkins TestQuality Updater Plugin 1.3 and earlier stores the TestQuality Updater password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Related CPE's

a

jenkins

testquality_updater

*

*

*

*

*

jenkins

Vulnerable

References

https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2091

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-312

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-01-26T21:18:18.807

2 years ago

Last modified

2023-02-02T16:52:43.467

2 years ago