Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-2209

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r32r-f6wr-cc3w

Password stored in plain text by Jenkins TestComplete support Plugin Jenkins TestComplete support Plugin prior to version 2.5.2 stores a password unencrypted in job `config.xml` files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system. Version 2.5.2 contains a patch for this issue.

gitlab/maven/org.jenkins-ci.plugins/TestComplete/CVE-2020-2209

Insufficiently Protected Credentials Jenkins TestComplete support Plugin stores a password unencrypted in job `config.xml` files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.