CVE-2020-2149

CWE-319 — Cleartext Transmission5 documents5 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 92.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Project Jenkins Repository Connector PluginJenkins Repository Connector
Timeline
PublishedMar 9
Latest updateMay 24

Description

Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

🔴Vulnerability Details

3
GHSA
Credentials transmitted in plain text by Repository Connector Plugin↗2022-05-24
▶
OSV
Credentials transmitted in plain text by Repository Connector Plugin↗2022-05-24
▶
CVEList
CVE-2020-2149: Jenkins Repository Connector Plugin 1↗2020-03-09
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2020-03-09↗2020-03-09
▶