Description
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/03/28/2
http://www.securityfocus.com/bid/107628
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089
Related Vulnerabilities
CVE-2020-7663 Vulnerability in maven package org.webjars.npm:websocket-extensions
CVE-2019-9153 Vulnerability in npm package openpgp
CVE-2022-45384 Vulnerability in maven package org.jenkins-ci.plugins:reverse-proxy-auth-plugin
CVE-2022-34305 Vulnerability in maven package org.apache.tomcat:tomcat
CVE-2023-46652 Vulnerability in maven package org.jenkins-ci.plugins:lambdatest-automation