-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:zos-connector | maven | <= 1.2.6.1 | 2.0.0 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability description explicitly identifies SCLMSCM.java as the source of the issue. The root cause is insufficient credential protection (CWE-522), specifically storing passwords in plain text. The patched version (2.0.0) migrated to the Credentials Plugin, confirming that prior versions handled credentials directly in SCLMSCM. While the exact method names aren't provided in the advisory, the class itself is the logical locus of the vulnerability given the context about configuration storage and credential exposure.
Ongoing coverage of React2Shell