CVE-2020-2291

CVSS v3.1 3.3 (Low)

CVSS v2.0 2.1 (Low)

EPSS 0.04 % (13^th)

Affected Products 1

Advisories 2

Jenkins couchdb-statistics Plugin 0.3 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

Weaknesses

CWE-522: Insufficiently Protected Credentials

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2020-10-08 13:15:11
(4 years ago)
Updated Date: 2023-10-25 18:16:41
(10 months ago)

Affected Products

Jenkins

Couchdb-statistics

Configuration #1

		CPE23	From	Up To
	Jenkins Couchdb-statistics for Jenkins 0.3 and prior versions	cpe:2.3:a:jenkins:couchdb-statistics::::::jenkins		<= 0.3