Description
Jenkins youtrack-plugin Plugin 0.7.1 and older stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/04/12/2
http://www.securityfocus.com/bid/107790
https://jenkins.io/security/advisory/2019-04-03/#SECURITY-963
Related Vulnerabilities
CVE-2022-23302 Vulnerability in maven package log4j:log4j
CVE-2019-1003093 Vulnerability in maven package org.jenkins-ci.plugins:nomad
CVE-2022-24947 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2019-16148 Vulnerability in maven package org.sakaiproject:chat-base
CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:coyote