-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from plaintext password storage in job config.xml files. The patch (commit 0098887) explicitly clears userName/userPassword fields when credentialsId is used, indicating these fields were the storage mechanism. The getUserPassword() method's use of Secret.getPlainText() and prepareServiceCommandLine's credential handling would directly expose the password. The newInstance method's modification to clear plaintext fields confirms these were the vulnerable entry points.
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:TestComplete | maven | < 2.5.2 | 2.5.2 |