Description
Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/07/02/7
https://jenkins.io/security/advisory/2020-07-02/#SECURITY-1656
Related Vulnerabilities
CVE-2015-9286 Vulnerability in npm package nodebb
CVE-2019-11819 Vulnerability in maven package org.opencms:org.opencms.workplace.tools.accounts
CVE-2017-1000421 Vulnerability in npm package gifsicle
CVE-2014-3607 Vulnerability in maven package edu.vt.middleware:vt-ldap
CVE-2021-31522 Vulnerability in maven package org.apache.kylin:kylin-server-base