CVE-2020-2150

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-2150

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2150.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-2150

Aliases

GHSA-6fh3-xhwg-7hfh

Published

2020-03-09T16:15:14.233Z

Modified

2026-07-08T17:56:27.369771Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

References

Affected packages

Git / github.com/jenkinsci/sonar-quality-gates-plugin

Affected ranges

Type

GIT

Repo

https://github.com/jenkinsci/sonar-quality-gates-plugin

Events

Introduced

Last affected

c160f6e0026f89542662ba3e18cc052df43ce716

Database specific

{
    "cpe": "cpe:2.3:a:jenkins:sonar_quality_gates:*:*:*:*:*:jenkins:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

1.*

1.0-SNAPSHOT-6

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.1.0

1.1.1

1.1.2

1.2.0

1.3.0

1.3.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2150.json"