Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000242.json"