CVE-2020-2124

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-2124

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2124.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-2124

Aliases

GHSA-h6pp-v4j6-w76c

Published

2020-02-12T15:15:13.883Z

Modified

2026-03-15T22:34:46.734797Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Jenkins Dynamic Extended Choice Parameter Plugin 1.0.1 and earlier stores a password unencrypted in job config.xml files on the Jenkins master where it can be viewed by users with Extended Read permission, or access to the master file system.

References

Affected packages

Git / github.com/jenkinsci/dynamic-extended-choice-parameter-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/dynamic-extended-choice-parameter-plugin

Events

Introduced

Last affected

1edf8e41bbf17b4a9d976477536bcc936d57947f

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.1"
        }
    ]
}

Affected versions

dynamic_extended_choice_parameter-1.*

dynamic_extended_choice_parameter-1.0.0

dynamic_extended_choice_parameter-1.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2124.json"