CVE-2020-2155

CWE-319 — Cleartext Transmission5 documents5 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 92.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins Project Jenkins Openshift Deployer PluginJenkins Openshift Deployer
Timeline
PublishedMar 9
Latest updateMay 24

Description

Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5jenkins_project/jenkins_openshift_deployer_pluginunspecified — 1.2.0

🔴Vulnerability Details

3
GHSA
Credentials transmitted in plain text by OpenShift Deployer Plugin↗2022-05-24
▶
OSV
Credentials transmitted in plain text by OpenShift Deployer Plugin↗2022-05-24
▶
CVEList
CVE-2020-2155: Jenkins OpenShift Deployer Plugin 1↗2020-03-09
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2020-03-09↗2020-03-09
▶
CVE-2020-2155 (MEDIUM CVSS 5.3) | Jenkins OpenShift Deployer Plugin 1 | cvebase.io