CVE-2020-2150

MEDIUM

Jenkins Sonar Quality Gates Plugin < 1.3.1 - Cleartext Transmission of Sensitive Credentials

Title source: llm
STIX 2.1

Description

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

References (2)

Core 2
Core References
Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/03/09/1

Scores

CVSS v3 5.3
EPSS 0.0003
EPSS Percentile 7.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-319
Status published
Products (2)
jenkins/sonar_quality_gates < 1.3.1
org.jenkins-ci.plugins/sonar-quality-gates 0Maven
Published Mar 09, 2020
Tracked Since Feb 18, 2026