GitHub Advisoryadvisory · Maven

GHSA-pwg7-4hxv-v4cw Plaintext Storage in Jenkins Spira Importer Plugin

LOW Published 2022-05-24 Modified 2022-11-01 Official page ↗
Aliases
CVE-2019-16543
Ecosystem
Maven
Packages
com.inflectra.spiratest.plugins:inflectra-spira-integration
Severity
Low
Weaknesses
CWE-256
Reviewed
2022-11-01

Affected packages

• Maven com.inflectra.spiratest.plugins:inflectra-spira-integration: < 3.2.3 → fixed in 3.2.3

Description

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Related

Alias · CVE (1)

  • CVE-2019-16543 Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where… vulnerability

Weakness · CWE (1)

  • CWE-256 Plaintext Storage of a Password weakness

References