Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jenkins Harvest SCM Plugin unspecified Clear all filters
TI-2020-02008 CVE-2020-2131 · GHSA-qj7p-9hgf-x8j7

Insufficiently protected credentials in Jenkins Harvest SCM Plugin

Priority LOW 30

Jenkins Harvest SCM Plugin 0.5.1 and earlier stores passwords unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00852 Published 2020-02-12 No fix listed CWE-522
TI-2020-02007 CVE-2020-2130 · GHSA-jmp9-f42q-4g85

Insufficiently protected credentials in Jenkins Harvest SCM Plugin

Priority LOW 30

Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00852 Published 2020-02-12 No fix listed CWE-522