Junglewise Threat Intelligence

CVE-2020-2249: Credentials stored in plain text by Jenkins tfs Plugin

CVE-2020-2249 · Severity: low · CVSS 3.1 · Published 2022-05-24

Technologies: org.jenkins-ci.plugins:tfs (Maven). Vendors: Maven.

Executive brief

Credentials stored in plain text by Jenkins tfs Plugin

Affected products

Maven org.jenkins-ci.plugins:tfs

Related threats

CSRF vulnerability in Jenkins Team Foundation Server Plugin allow capturing credentials
Missing permission check in Jenkins Team Foundation Server Plugin allow capturing credentials
Missing permission check in Jenkins Team Foundation Server Plugin allows enumerating credentials IDs