| Package | Affected versions | Patched versions |
|---|---|---|
| org.jvnet.hudson.plugins:instant-messaging | < 1.42 | 1.42 |
| instant-messaging | < 1.42 | 1.42 |
Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configuration file of plugins based on Jenkins instant-messaging Plugin on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free