GHSA-65rj-cgrp-g65w
GitHub Security Advisory
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Jenkins IBM Application Security on Cloud Plugin 1.2.4 and earlier transmitted configured passwords in plain text as part of job configuration forms, potentially resulting in their exposure. This plugin has bee deprecated.
Affected Packages
Maven
com.hcl.security:ibm-application-security
Affected versions:
0
(fixed in 1.2.5)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 27, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.