CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2020-2127

Jenkins BMC Release Package and Deployment Plugin 1.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.2%

CVSS Severity

CVSS v3 Score 4.3

CVSS v2 Score 4.0

References

http://www.openwall.com/lists/oss-security/2020/02/12/3
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1547
http://www.openwall.com/lists/oss-security/2020/02/12/3
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1547

Products affected by CVE-2020-2127

Jenkins » Bmc Release Package And Deployment » Version: 1.0

cpe:2.3:a:jenkins:bmc_release_package_and_deployment:1.0
Jenkins » Bmc Release Package And Deployment » Version: 1.1

cpe:2.3:a:jenkins:bmc_release_package_and_deployment:1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-2127

Products

Pricing

Contact Us