Description (CNA)
Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can recover credentials. The component is: config-variables.jelly line #30 (passwordVariable). The attack vector is: Attacker creates and executes a Jenkins job.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins Credentials Binding Plugin / Jenkins | affected 1.17 |
CWE
CWE-257
References
- https://docs.google.com/document/d/1MBEoJSMvkjp5Kua0bRD_kiDBisL0fOCwTL9uMWj4lGA/edit?usp=sharing
- http://www.securityfocus.com/bid/109320
ADP enrichment
No English description supplied.