Description
A vulnerability in Jenkins PRQA Plugin 3.1.0 and earlier allows attackers with local file system access to the Jenkins home directory to obtain the unencrypted password from the plugin configuration.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/03/28/2
http://www.securityfocus.com/bid/107628
https://jenkins.io/security/advisory/2019-03-25/#SECURITY-1089
Related Vulnerabilities
CVE-2020-2275 Vulnerability in maven package org.jenkins-ci.plugins:copy-data-to-workspace-plugin
CVE-2020-2263 Vulnerability in maven package org.jenkins-ci.plugins:radiatorviewplugin
CVE-2021-23400 Vulnerability in npm package nodemailer
CVE-2022-21144 Vulnerability in npm package libxmljs
CVE-2021-21290 Vulnerability in maven package io.netty:netty-codec-http