Threats tagged 'ghsa-2g8w-9933-36vr'

The Jenkins Warrior Framework Plugin version 1.2 and earlier stores passwords in an unencrypted form within job config.xml files on the Jenkins controller. These passwords can be accessed by users who have Item/Extended Read permissions or by anyone with access to the Jenkins controller's file system. This vulnerability exposes sensitive credentials to unauthorized viewing.