| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:hp-quality-center | ≤ 1.6 | |
| hp application lifecycle management quality center | ≤ 1.6 |
HP ALM Quality Center Plugin 1.6 and earlier stores a password in plain text in its global configuration file org.jenkinsci.plugins.qc.QualityCenterIntegrationRecorder.xml. This password can be viewed by users with access to the Jenkins controller file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free