Skip to content
Not rated

CVE-2020-2130 Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the…

Description

Jenkins Harvest SCM Plugin 0.5.1 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Harvest SCM Plugin 0.5 earliest → 0.5.1 No fix stated
The 2 CVEs of Jenkins Harvest SCM Plugin →
Track this CVE