CVE-2020-2114 - Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure

Back Back to CVE browser

HIGH

Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure

Published Feb 12, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.08%

Description

Jenkins S3 publisher Plugin 0.11.4 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Affected products

Vendor Jenkins project Product Jenkins S3 publisher Plugin Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=0.11.4

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jenkins project

Jenkins S3 publisher Plugin

n/a

Version	Status	Constraints
unspecified	affected	<=0.11.4

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-319

CWE-522

Insufficiently Protected Credentials

References (6)

http://www.openwall.com/lists/oss-security/2020/02/12/3
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3764
Advisory
https://github.com/advisories/GHSA-ffr6-8cv5-j637
Advisory
https://github.com/jenkinsci/s3-plugin/commit/ee92830bc670b1ab70d19b34fa2ee1a3e0dac12c
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1684
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2114

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2020/02/12/3		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3764		Advisory
https://github.com/advisories/GHSA-ffr6-8cv5-j637		Advisory
https://github.com/jenkinsci/s3-plugin/commit/ee92830bc670b1ab70d19b34fa2ee1a3e0dac12c
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1684		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-2114