Vulnerability Details CVE-2020-2251
Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.6%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
Products affected by CVE-2020-2251
-
cpe:2.3:a:jenkins:jenkins:*
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:-
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.0
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.1
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.2
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.3
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.4
-
cpe:2.3:a:jenkins:soapui_pro_functional_testing:1.5