Description
Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/09/25/3
https://jenkins.io/security/advisory/2019-09-25/#SECURITY-1508
Related Vulnerabilities
CVE-2019-0205 Vulnerability in maven package org.webjars.bower:thrift
CVE-2023-26127 Vulnerability in npm package n158
CVE-2021-21625 Vulnerability in maven package org.jenkins-ci.plugins:aws-credentials
CVE-2022-25908 Vulnerability in npm package create-choo-electron
CVE-2020-2205 Vulnerability in maven package org.jenkins-ci.plugins:vncrecorder