CVE-2020-2210

MEDIUM

Jenkins Stash Branch Param Plug <0.3.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Jenkins Stash Branch Parameter Plugin 0.3.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

References (2)

Core 2
Core References
Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/07/02/7

Scores

CVSS v3 4.3
EPSS 0.0003
EPSS Percentile 10.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-319
Status published
Products (2)
jenkins/stash_branch_parameter < 0.3.0
org.jenkins-ci.plugins/StashBranchParameter 0Maven
Published Jul 02, 2020
Tracked Since Feb 18, 2026