CVE-2020-2145 – Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores

Jenkins Zephyr Enterprise Test Management Plugin 1.9.1 and earlier stores its Zephyr password in plain text on the Jenkins master file system.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2145

Reference (s):

• https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1596
• MLIST:[oss-security] 20200309 Multiple vulnerabilities in Jenkins plugins
• URL: http://www.openwall.com/lists/oss-security/2020/03/09/1