Jenkins EasyQA Plugin Stores User Passwords Unencrypted

CVE-2022-34202

What is CVE-2022-34202?

The Jenkins EasyQA Plugin prior to version 1.1 is susceptible to a vulnerability where user passwords are stored in an unencrypted format within the global configuration file. This presents a significant risk, as unauthorized users with access to the Jenkins controller file system can easily view sensitive credentials. It is essential for users of this plugin to take immediate action to secure their installations and consider upgrading to a patched version.

References