Credential Exposure Affecting org.jenkins-ci.plugins:quality-gates package, versions [0,]
Threat Intelligence
EPSS
0.09% (40th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGJENKINSCIPLUGINS-559583
- published 10 Mar 2020
- disclosed 9 Mar 2020
- credit James Holderness, IB Boost
Introduced: 9 Mar 2020
CVE-2020-2150 Open this link in a new tabHow to fix?
There is no fixed version for org.jenkins-ci.plugins:quality-gates.
Overview
org.jenkins-ci.plugins:quality-gates is a Jenkins plugin that will fail the build whenever the Quality Gates criteria in the Sonar analysis aren't met.
Affected versions of this package are vulnerable to Credential Exposure. It transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
References
CVSS Scores
version 3.1