Description
Jenkins elOyente Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1561
Related Vulnerabilities
CVE-2021-3794 Vulnerability in npm package @vuelidate/validators
CVE-2020-15228 Vulnerability in npm package @actions/core
CVE-2020-36380 Vulnerability in npm package aaptjs
CVE-2022-45685 Vulnerability in maven package org.codehaus.jettison:jettison
CVE-2022-24999 Vulnerability in maven package org.webjars.bower:qs