Description
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1523
Related Vulnerabilities
CVE-2022-39386 Vulnerability in npm package @fastify/websocket
CVE-2020-8203 Vulnerability in maven package org.webjars.npm:lodash
CVE-2016-5019 Vulnerability in maven package org.apache.myfaces.trinidad:trinidad-impl
CVE-2019-19771 Vulnerability in npm package coinstrng
CVE-2020-9447 Vulnerability in maven package com.googlecode.gwtupload:gwtupload-samples