Not rated

CVE-2020-2132 Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on…

Description

Jenkins Parasoft Environment Manager Plugin 2.14 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Parasoft Environment Manager Plugin 2.14	earliest → 2.14	No fix stated

Do you use Jenkins Parasoft Environment Manager Plugin?

Track this CVE Watch Jenkins Parasoft Environment Manager Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2020-2132

Timeline

Published February 12, 2020
Last modified August 4, 2024

References

jenkins.io jenkins.io
[oss-security] 20200212 Multiple vulnerabilities in Jenkins plugins www.openwall.com

Track this CVE