Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.
References
Link | Resource |
---|---|
http://www.openwall.com/lists/oss-security/2020/03/25/2 | Mailing List Third Party Advisory |
https://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20%281%29 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: jenkins
Published: 2020-03-25T16:05:36
Updated: 2023-10-24T16:06:09.824Z
Reserved: 2019-12-05T00:00:00
Link: CVE-2020-2164
JSON object: View
NVD Information
Status : Modified
Published: 2020-03-25T17:15:15.280
Modified: 2023-10-25T18:16:33.427
Link: CVE-2020-2164
JSON object: View
Redhat Information
No data.
CWE