Credential Exposure Affecting com.applatix.jenkins:applatix Open this link in a new tab package, versions [0,]
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.Test your applications
14 Feb 2020
12 Feb 2020
James Holderness, IB Boost
How to fix?
There is no fixed version for
com.applatix.jenkins:applatix is an Applatix plugins for Jenkins.
Affected versions of this package are vulnerable to Credential Exposure. The plugin stores the Applatix password unencrypted in job
config.xml files as part of its configuration. This credential can be viewed by users with Extended Read permission or access to the master file system.
As of publication of this advisory, there is no fix.