Description
Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Remediation
References
https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2057
Related Vulnerabilities
CVE-2018-20677 Vulnerability in maven package org.webjars:bootstrap-sass
CVE-2018-1273 Vulnerability in maven package org.springframework.data:spring-data-commons
CVE-2023-40167 Vulnerability in maven package org.eclipse.jetty:jetty-http
CVE-2017-1000093 Vulnerability in maven package org.jenkins-ci.plugins:pollscm
CVE-2023-31062 Vulnerability in maven package org.apache.inlong:manager-service