Description
Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/09/01/3
https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20%282%29
Related Vulnerabilities
CVE-2020-26301 Vulnerability in npm package ssh2
CVE-2019-10753 Vulnerability in maven package com.diffplug.gradle.spotless:spotless-eclipse-groovy
CVE-2020-2249 Vulnerability in maven package org.jenkins-ci.plugins:tfs
CVE-2022-38751 Vulnerability in maven package org.yaml:snakeyaml
CVE-2016-4464 Vulnerability in maven package org.apache.cxf.fediz:fediz-core