GHSA-xp44-8vwr-xwmv
GitHub Security Advisory
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Affected Packages
Maven
org.jenkins-ci.plugins:aqua-security-scanner
Affected versions:
0
(fixed in 3.0.18)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 25, 2025 6:33 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.