← CVE Intelligence

CVE-2021-21614

Jenkins project / Jenkins Bumblebee HP ALM Plugin PUBLISHED

Description (CNA)

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Affected (CNA)

Vendor / productVersions
Jenkins project / Jenkins Bumblebee HP ALM Pluginaffected unspecified through 4.1.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.