GitHub Advisoryadvisory · Maven

GHSA-53jw-4gwh-m8cm Jenkins LDAP Email Plugin shows plain text password in configuration form

LOW Published 2022-05-24 Modified 2023-01-28 Official page ↗
Aliases
CVE-2019-10434
Ecosystem
Maven
Packages
com.mtvi.plateng.hudson:ldapemail
Severity
Low
Weaknesses
CWE-256
Reviewed
2023-01-28

Affected packages

• Maven com.mtvi.plateng.hudson:ldapemail: <= 0.8 (no fix yet)

Description

Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

Related

Alias · CVE (1)

  • CVE-2019-10434 Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially… vulnerability

Weakness · CWE (1)

  • CWE-256 Plaintext Storage of a Password weakness

References