Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
Low severity
GitHub Reviewed
Published
May 24, 2022
to the GitHub Advisory Database
•
Updated Dec 21, 2023
Package
Affected versions
< 1.10
Patched versions
1.10
Description
Published by the National Vulnerability Database
Sep 12, 2019
Published to the GitHub Advisory Database
May 24, 2022
Reviewed
Mar 2, 2023
Last updated
Dec 21, 2023
Beaker builder Plugin stored the Beaker password unencrypted on the Jenkins controller. This password could be viewed by users with access to the Jenkins controller file system.
Beaker builder Plugin now stores these credentials encrypted.
References