Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2020/03/09/1 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1596 | Vendor Advisory |
History
No history.
![cve-icon](/static/img/cve-icon.png)
Status: PUBLISHED
Assigner: jenkins
Published: 2020-03-09T15:01:00
Updated: 2023-10-24T16:05:47.117Z
Reserved: 2019-12-05T00:00:00
Link: CVE-2020-2145
JSON object: View
![cve-icon](/static/img/nvd-icon.png)
Status : Modified
Published: 2020-03-09T16:15:13.640
Modified: 2023-10-25T18:16:32.183
Link: CVE-2020-2145
JSON object: View
![cve-icon](/static/img/redhat-icon.png)
No data.
CWE