What is GHSA-pwg7-4hxv-v4cw?

GHSA-pwg7-4hxv-v4cw is a security advisory published by GitHub Security Advisories with Low severity. Plaintext Storage in Jenkins Spira Importer Plugin

Which CVE IDs does GHSA-pwg7-4hxv-v4cw cover?

GHSA-pwg7-4hxv-v4cw covers the following CVE IDs: CVE-2019-16543. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-pwg7-4hxv-v4cw?

GHSA-pwg7-4hxv-v4cw affects 1 product, including: maven/com.inflectra.spiratest.plugins:inflectra-spira-integration:\u003c 3.2.3.

GHSA-pwg7-4hxv-v4cwLow

Plaintext Storage in Jenkins Spira Importer Plugin

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

January 30, 2023

🔗 CVE IDs covered (1)

CVE-2019-16543 →

📋 Description

Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.

🎯 Affected products1

maven/com.inflectra.spiratest.plugins:inflectra-spira-integration:< 3.2.3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-16543
https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1554
http://www.openwall.com/lists/oss-security/2019/11/21/1
https://github.com/advisories/GHSA-pwg7-4hxv-v4cw