Plaintext Storage of a Password in Jenkins Eagle Tester Plugin

MEDIUM 6.5CVE-2020-2129 · GHSA-vj6f-q4w6-qx9p · Published 12/02/2020 · updated 17/06/2026

In short

CVE-2020-2129 is a MEDIUM (CVSS 6.5) vulnerability affecting com.mobileenerlytics.eagle.tester:eagle-tester, eagle tester (jenkins).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
com.mobileenerlytics.eagle.tester:eagle-tester Maven	`≤ 1.0.9`	No fix yet
eagle tester jenkins	`≤ 1.0.9`	No fix yet

Description

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2020-2129 · ADVISORY
jenkins.io/security/advisory/2020-02-12 · WEB
openwall.com/lists/oss-security/2020/02/12/3 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free