| Package | Affected versions | Patched versions |
|---|---|---|
| com.datatheorem.mobileappsecurity.jenkins.plugin:datatheorem-mobile-app-security | < 1.4.0 | 1.4.0 |
| data theorem mobile app security | ≤ 1.3 |
Data Theorem Mobile Security: CI/CD Plugin stored a proxy password unencrypted in job config.xml files on the Jenkins controller. This password could be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Data Theorem Mobile Security: CI/CD Plugin now stores the proxy password encrypted. Existing jobs need to have their configuration saved for existing plain text proxy passwords to be overwritten.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free