Description
Jenkins Skype notifier Plugin 1.1.0 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
Remediation
References
https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-2160
Related Vulnerabilities
CVE-2023-24807 Vulnerability in npm package undici
CVE-2012-5885 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2011-0534 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2019-14838 Vulnerability in maven package org.wildfly.core:wildfly-host-controller
CVE-2020-8203 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash