Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-10428 · ADVISORY
• jenkins.io/security/advisory/2019-09-25 · WEB
• openwall.com/lists/oss-security/2019/09/25/3 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:aqua-security-scanner

• CVE-2025-53653TRUNG BÌNH 4.3Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins…
• CVE-2019-1003069CAO 8.8Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be…