Description
Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1522
Related Vulnerabilities
CVE-2022-38179 Vulnerability in maven package io.ktor:ktor-utils
CVE-2021-23359 Vulnerability in npm package port-killer
CVE-2014-7808 Vulnerability in maven package org.apache.wicket:wicket-core
CVE-2019-16869 Vulnerability in maven package io.netty:netty-codec-http
CVE-2023-33510 Vulnerability in maven package org.jeecgframework.p3:jeecg-p3-biz-chat