Skip to content
Not rated

CVE-2020-2153 Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration…

Description

Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

Affected products and versions

Product Affected versions Fixed in
Jenkins Backlog Plugin 2.4 earliest → 2.4 No fix stated
Track this CVE