GHSA-pwg7-4hxv-v4cw

Suggest an improvement
Source
https://github.com/advisories/GHSA-pwg7-4hxv-v4cw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-pwg7-4hxv-v4cw/GHSA-pwg7-4hxv-v4cw.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-pwg7-4hxv-v4cw
Aliases
  • CVE-2019-16543
Published
2022-05-24T17:01:41Z
Modified
2024-11-28T05:26:49.533433Z
Summary
Plaintext Storage in Jenkins Spira Importer Plugin
Details

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Database specific
{
    "nvd_published_at": "2019-11-21T15:15:00Z",
    "cwe_ids": [
        "CWE-256"
    ],
    "severity": "LOW",
    "github_reviewed": true,
    "github_reviewed_at": "2022-11-01T22:59:13Z"
}
References

Affected packages

Maven / com.inflectra.spiratest.plugins:inflectra-spira-integration

Package

Name
com.inflectra.spiratest.plugins:inflectra-spira-integration
View open source insights on deps.dev
Purl
pkg:maven/com.inflectra.spiratest.plugins/inflectra-spira-integration

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.2.3

Affected versions

3.*

3.2.2