Skip to content
Sign in
Not rated

CVE-2020-2209 Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the…

Description

Jenkins TestComplete support Plugin 2.4.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins TestComplete support Plugin 2.4 earliest → 2.4.1 No fix stated

Other CVEs of Jenkins TestComplete support Plugin

The 3 CVEs of Jenkins TestComplete support Plugin →
CVE-2023-33002 Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a… 5.4 Medium CVE-2023-24443 Jenkins TestComplete support Plugin 2.8.1 and earlier does not configure its XML parser to prevent XML external entity… 9.8 Critical
Track this CVE