Skip to content
Sign in
Not rated

CVE-2020-2156 Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job…

Description

Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

Affected products and versions

Product Affected versions Fixed in
Jenkins DeployHub Plugin 8.0 earliest → 8.0.14 No fix stated

Other CVEs of Jenkins DeployHub Plugin

The 2 CVEs of Jenkins DeployHub Plugin →
CVE-2019-10286 Jenkins DeployHub Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can… Not rated
Track this CVE