GHSA-56gj-927p-mfph
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:aqua-serverless | < 1.0.5 | 1.0.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
Jenkins Aqua Security Serverless Scanner Plugin 1.0.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure.
References
External links from the advisory. They lead to third-party sites.