Jenkins Passwords transmitted in plain text (CVE-2020-2251)

Description

Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

Remediation

References

CVE-2020-2251

Related Vulnerabilities

WordPress Plugin WP Ad Guru Lite Cross-Site Scripting (1.6.0)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.19)

WordPress Plugin wp-publications Local File Inclusion (0.0)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9640)

WordPress Plugin Security & Malware scan by CleanTalk Security Bypass (2.50)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N