Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2013-5676

Plugin: Plain Text Password Disclosure via configuration parameters

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

CVSS 2.0 · 4.0 Medium EPSS 5.0% KEV · Not listed
Vendors
Sonarsource
Products
Jenkins Plugin Sonarqube