Skip to content
Sign in
Not rated

CVE-2020-2239 Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration…

Description

Jenkins Parameterized Remote Trigger Plugin 3.1.3 and earlier stores a secret unencrypted in its global configuration file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Parameterized Remote Trigger Plugin 3.1 earliest → 3.1.3 No fix stated

Other CVEs of Jenkins Parameterized Remote Trigger Plugin

The 3 CVEs of Jenkins Parameterized Remote Trigger Plugin →
CVE-2026-84676 Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the… 4.3 Medium CVE-2026-70438 A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier allows attackers with… 4.3 Medium
Track this CVE