Description
Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.
Remediation
References
https://jenkins.io/security/advisory/2019-12-17/#SECURITY-1521
http://www.openwall.com/lists/oss-security/2019/12/17/1
Related Vulnerabilities
CVE-2023-26920 Vulnerability in npm package fast-xml-parser
CVE-2020-11971 Vulnerability in maven package org.apache.camel:camel-spring
CVE-2022-24821 Vulnerability in maven package org.xwiki.platform:xwiki-platform-skin-skinx
CVE-2018-11770 Vulnerability in maven package org.apache.spark:spark-core
CVE-2022-43413 Vulnerability in maven package org.jenkins-ci.plugins:job-import-plugin