CVE-2020-2165

LOW3.1EPSS 0.33%

Passwords transmitted in plain text by Jenkins Artifactory Plugin

發布日:2022/5/24修改日:2025/4/3

也稱為:GHSA-xqf6-5grh-6223BIT-artifactory-2020-2165

描述

Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

受影響套件(2)

Bitnami/artifactoryfrom 0, < 3.6.1
Maven/org.jenkins-ci.plugins:artifactoryfrom 0, < 3.6.1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	LOW3.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

參考連結(5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-2165
PATCHhttps://github.com/jenkinsci/artifactory-plugin
WEBhttps://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20(2)
WEBhttps://jenkins.io/security/advisory/2020-03-25/#SECURITY-1542%20%282%29
WEBhttp://www.openwall.com/lists/oss-security/2020/03/25/2