-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:http_request | maven | < 1.16 | 1.16 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stemmed from handling Basic/Digest authentication credentials. The commit diff shows these functions managed a list of BasicDigestAuthentication objects containing plaintext passwords. The patch deprecates these functions, marks the storage field as transient, and removes related UI elements. The presence of these functions enabled unencrypted credential storage in jenkins.plugins.http_request.HttpRequest.xml, which was accessible to filesystem users. Their removal in the security fix directly addresses the plaintext storage issue.
Ongoing coverage of React2Shell