-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:rundeck | maven | <= 3.6.5 | 3.6.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from plaintext credential storage in XML configuration files. Key functions identified are:
Though no patch code is available, the advisory explicitly states credentials were stored in org.jenkinsci.plugins.rundeck.RundeckNotifier.xml and job config.xml files. In Jenkins plugin architecture, these patterns match:
Confidence is medium due to inferred implementation patterns rather than direct patch analysis, but strongly aligned with Jenkins plugin security practices and advisory details.