CVE-2020-2155

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-2155

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-2155.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-2155

Aliases

GHSA-2rrx-q65f-8945

Published

2020-03-09T16:15:14.863Z

Modified

2025-11-14T10:55:53.549207Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

References

Affected packages

Git / github.com/jenkinsci/openshift-deployer-plugin

Affected ranges

Type: GIT
Repo: https://github.com/jenkinsci/openshift-deployer-plugin
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

88245589325b2cceeefb1c5d90503acc08e9f48c

Affected versions

v1.*

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.1.0

v1.1.1

v1.2.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-2155.json"