Credential Exposure Affecting org.jenkins-ci.plugins:quality-gates package, versions [0,]


Severity

Recommended
0.0
low
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.03% (6th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-JAVA-ORGJENKINSCIPLUGINS-559583
  • published10 Mar 2020
  • disclosed9 Mar 2020
  • creditJames Holderness, IB Boost

Introduced: 9 Mar 2020

CVE-2020-2150  (opens in a new tab)
CWE-319  (opens in a new tab)

How to fix?

There is no fixed version for org.jenkins-ci.plugins:quality-gates.

Overview

org.jenkins-ci.plugins:quality-gates is a Jenkins plugin that will fail the build whenever the Quality Gates criteria in the Sonar analysis aren't met.

Affected versions of this package are vulnerable to Credential Exposure. It transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

CVSS Base Scores

version 3.1