Passwords stored in plain text by Jenkins ReadyAPI Functional Testing Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2250 · ADVISORY
• jenkinsci/soapui-pro-functional-testing-plugin · PACKAGE
• jenkins.io/security/advisory/2020-09-01 · WEB
• openwall.com/lists/oss-security/2020/09/01/3 · WEB
• jenkins.io/security/advisory/2020-09-01

Lỗ hổng khác của org.jenkins-ci.plugins:soapui-pro-functional-testing

• CVE-2025-53657TRUNG BÌNH 4.3Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed o…
• CVE-2025-53656TRUNG BÌNH 6.5Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job…
• CVE-2020-2251TRUNG BÌNH 4.3Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job c…