Description
Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
Remediation
References
Related Vulnerabilities
WordPress Plugin Restaurant Menu by MotoPress Cross-Site Scripting (2.4.1)
Internet Information Services Other Vulnerability (CVE-1999-0739)
IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7440)
DOMPurify URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-25155)
WordPress Plugin UserPro-Community and User Profile Privilege Escalation (4.9.20)