Passwords stored in plain text by Harvest SCM Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-2131 · ADVISORY
• jenkinsci/harvest-plugin · PACKAGE
• jenkins.io/security/advisory/2020-02-12 · WEB
• openwall.com/lists/oss-security/2020/02/12/3 · WEB

org.jenkins-ci.plugins:harvest のその他の脆弱性

• CVE-2020-2130中 6.5Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it c…