-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:elastest | maven | <= 1.2.1 |
Miggo AIRoot Cause AnalysisThe vulnerability explicitly involves unencrypted password storage in ElasTestInstallation.xml. Jenkins plugins typically use setters/getters (like setServerPassword/getServerPassword) to manage configuration properties. The absence of encryption in these functions directly enables cleartext storage. While specific code isn't shown, the pattern matches Jenkins plugin security anti-patterns for credential storage, and the advisory explicitly identifies the configuration file and storage mechanism.
JavaJavaOngoing coverage of React2Shell