Unencrypted Password Storage in Jenkins RQM Plugin by Jenkins

CVE-2022-34809

Summary

The Jenkins RQM Plugin versions 2.8 and earlier are susceptible to a security flaw where passwords are stored unencrypted in the global configuration file of the Jenkins controller. This configuration file is accessible to users with access rights to the Jenkins file system, potentially exposing sensitive information and compromising security. For further details, visit the Jenkins security advisory.

References