CVE-2020-2155

Опубликовано: 09 мар. 2020

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

Ссылки

http://www.openwall.com/lists/oss-security/2020/03/09/1
Third Party Advisory
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1518
Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/03/09/1
Third Party Advisory
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1518
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:openshift_deployer:*:*:*:*:*:jenkins:*:*

Версия до 1.2.0 (включая)

EPSS

Процентиль: 7%

0.00027

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-319

Связанные уязвимости

GHSA-2rrx-q65f-8945

CVSS3: 3.1

github

больше 3 лет назад

Credentials transmitted in plain text by OpenShift Deployer Plugin