CVE-2020-2153

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: Mar 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-215305.5fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.CVE-2020-215315.5fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.CVE-2020-215325.5fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.CVE-2020-215335.5fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.CVE-2020-215345.5fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.CVE-2020-215355.5fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.CVE-2020-21545.5Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier stores its credentials in plain text in a global configuration file on the Je CVE-2020-215478.8Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.CVE-2020-215488.8Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.CVE-2020-21555.3Jenkins OpenShift Deployer Plugin 1.2.0 and earlier transmits configured credentials in plain text as part of its global Jenkins configurati CVE-2020-215548.1A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user CVE-2020-21564.3Jenkins DeployHub Plugin 8.0.14 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially r