Description
Jenkins Beaker Builder Plugin 1.9 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they could be viewed by users with access to the master file system.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/09/12/2
https://jenkins.io/security/advisory/2019-09-12/#SECURITY-1545
Related Vulnerabilities
CVE-2020-10683 Vulnerability in maven package org.dom4j:dom4j
CVE-2020-13951 Vulnerability in maven package org.apache.openmeetings:openmeetings-server
CVE-2018-1000420 Vulnerability in maven package org.jenkins-ci.plugins:mesos
CVE-2019-11808 Vulnerability in maven package io.ratpack:ratpack-session
CVE-2020-28168 Vulnerability in maven package org.webjars.bowergithub.axios:axios