jenkinsci/ldapemail-plugin · Security
Jenkins LDAP Email Plugin shows plain text password in configuration form
- GHSA ID
- GHSA-53jw-4gwh-m8cm
- CVE ID
- CVE-2019-10434
- Severity
- low
- Published
- Updated
Description
Jenkins LDAP Email Plugin transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
CWEs
- CWE-256 · Plaintext Storage of a Password