Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-2157

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

VectorNETWORK

PublishedMar 09, 2020, 16:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:skytap(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1522

Weakness Type

CWE-319

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK