Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.awsbeanstalkpublisher.AWSEBPublisher.xml
on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system.
{ "nvd_published_at": "2019-04-04T16:29:00Z", "cwe_ids": [ "CWE-311" ], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-10-26T12:36:17Z" }