CVE-2020-2251

MEDIUM

Jenkins SoapUI Pro Functional Testing Plugin <1.5 - Info Disclosure

Title source: llm

Description

Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://jenkins.io/security/advisory/2020-09-01/#SECURITY-1631%20%282%29

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2020/09/01/3

Scores

CVSS v3 4.3

EPSS 0.0004

EPSS Percentile 12.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-319

Status published

Products (3)

jenkins/jenkins < 2.236

jenkins/soapui_pro_functional_testing < 1.5

org.jenkins-ci.plugins/soapui-pro-functional-testing 0 - 1.6Maven

Published Sep 01, 2020

Tracked Since Feb 18, 2026