# Hard-coded credentials. Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Jenkins S3 Publisher Plugin transmits credentials in plain text during configuration](https://agentprime.io/advisories/GHSA-ffr6-8cv5-j637.md) `GHSA-ffr6-8cv5-j637`, `CVE-2020-2114` · Maven `org.jenkins-ci.plugins:s3`: affected `<0.11.5`, fixed in `0.11.5` · CVSS 3.1 Low · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, Hard-coded credentials - [Fortify Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-xr37-pjfh-qwwc.md) `GHSA-xr37-pjfh-qwwc`, `CVE-2020-2107` · Maven `org.jenkins-ci.plugins:fortify`: affected `<19.2.30`, fixed in `19.2.30` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Redgate SQL Change Automation Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-x23m-8c2h-6wg7.md) `GHSA-x23m-8c2h-6wg7`, `CVE-2020-2095` · Maven `com.redgate.plugins.redgatesqlci:redgate-sql-ci`: affected `<2.0.5`, fixed in `2.0.5` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [keycloak vulnerable to unauthorized login via mail server setup](https://agentprime.io/advisories/GHSA-cf8f-w2c5-p5jr.md) `GHSA-cf8f-w2c5-p5jr`, `CVE-2019-14837` · Maven `org.keycloak:keycloak-core`: affected `<8.0.0`, fixed in `8.0.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-547 - [Jenkins Weibo Plugin stores credentials unencrypted in its global configuration file](https://agentprime.io/advisories/GHSA-5c97-gxr3-r368.md) `GHSA-5c97-gxr3-r368`, `CVE-2019-16572` · Maven `org.jenkins-ci.plugins:weibo`: affected `<=1.0.1`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256, CWE-1024 - [Jenkins Rundeck Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-qh3m-c6hw-5hmv.md) `GHSA-qh3m-c6hw-5hmv`, `CVE-2019-16556` · Maven `org.jenkins-ci.plugins:rundeck`: affected `<3.6.6`, fixed in `3.6.6` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Redgate SQL Change Automation Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-9hpq-528p-48j3.md) `GHSA-9hpq-528p-48j3`, `CVE-2019-16557` · Maven `com.redgate.plugins.redgatesqlci:redgate-sql-ci`: affected `<2.0.4`, fixed in `2.0.4` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins QMetry for JIRA Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-8mjp-8c2x-3g7w.md) `GHSA-8mjp-8c2x-3g7w`, `CVE-2019-16544` · Maven `org.jenkins-ci.plugins:qmetry-for-jira-test-management`: affected `<1.13`, fixed in `1.13` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-jg29-c2qj-wpm3.md) `GHSA-jg29-c2qj-wpm3`, `CVE-2019-16542` · Maven `org.jenkins-ci.plugins:anchore-container-scanner`: affected `<1.0.20`, fixed in `1.0.20` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Zulip Plugin vulnerable to Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-hfjr-m75m-wmh7.md) `GHSA-hfjr-m75m-wmh7`, `CVE-2019-10476` · Maven `org.jenkins-ci.plugins:zulip`: affected `<1.1.1`, fixed in `1.1.1` · CVSS 7.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-6xw9-qq9h-cr68.md) `GHSA-6xw9-qq9h-cr68`, `CVE-2019-10461` · Maven `org.jenkins-ci.plugins:dynatrace-dashboard`: affected `<2.1.4`, fixed in `2.1.4` · CVSS 7.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-84h6-jf8x-ff2j.md) `GHSA-84h6-jf8x-ff2j`, `CVE-2019-10460` · Maven `org.jenkins-ci.plugins:bitbucket-oauth`: affected `<0.10`, fixed in `0.10` · CVSS 7.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Sonar Gerrit Plugin stores credentials unencrypted](https://agentprime.io/advisories/GHSA-6fv3-w7j6-5xfc.md) `GHSA-6fv3-w7j6-5xfc`, `CVE-2019-10467` · Maven `org.jenkins-ci.plugins:sonar-gerrit`: affected `<2.4.5`, fixed in `2.4.5` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Mattermost Notification Plugin contains unencrypted storage of secret token](https://agentprime.io/advisories/GHSA-xcj6-4355-2823.md) `GHSA-xcj6-4355-2823`, `CVE-2019-10459` · Maven `org.jenkins-ci.plugins:mattermost`: affected `<2.7.1`, fixed in `2.7.1` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Cleartext Storage of Sensitive Information in Jenkins Extensive Testing Plugin](https://agentprime.io/advisories/GHSA-8x6c-375h-pm4f.md) `GHSA-8x6c-375h-pm4f`, `CVE-2019-10448` · Maven `jenkins.xtc:extensivetesting`: affected `=1.4.4b`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: Information disclosure, Hard-coded credentials - [Jenkins elOyente Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-jv62-6xvc-ccwh.md) `GHSA-jv62-6xvc-ccwh`, `CVE-2019-10424` · Maven `com.technicolor:elOyente`: affected `<=1.3`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Google Calendar Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-8gq4-x72r-6xcr.md) `GHSA-8gq4-x72r-6xcr`, `CVE-2019-10425` · Maven `org.jenkins-ci.plugins:gcal`: affected `<=0.4`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Assembla Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-mhq6-h9m7-wq8c.md) `GHSA-mhq6-h9m7-wq8c`, `CVE-2019-10420` · Maven `org.jenkins-ci.plugins:assembla`: affected `<=1.4`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins CodeScan Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-jp8r-jh5j-cgwf.md) `GHSA-jp8r-jh5j-cgwf`, `CVE-2019-10423` · Maven `com.villagechief.codescan.jenkins:codescan`: affected `<=1.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Call Remote Job Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-j8c7-fm85-6jj6.md) `GHSA-j8c7-fm85-6jj6`, `CVE-2019-10422` · Maven `org.ukiuni.callOtherJenkins:call-remote-job-plugin`: affected `<=1.0.21`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins vFabric Application Director Plugin Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-hx82-2ggv-vwm5.md) `GHSA-hx82-2ggv-vwm5`, `CVE-2019-10419` · Maven `org.jenkins-ci.plugins:application-director-plugin`: affected `<=1.3`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Git Changelog Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-h27g-72mh-9m33.md) `GHSA-h27g-72mh-9m33`, `CVE-2019-10414` · Maven `de.wellnerbou.jenkins:git-changelog`: affected `<2.18`, fixed in `2.18` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Violation Comments to GitLab Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-8hwr-589g-xpj2.md) `GHSA-8hwr-589g-xpj2`, `CVE-2019-10415` · Maven `org.jenkins-ci.plugins:violation-comments-to-gitlab`: affected `<2.29`, fixed in `2.29` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Azure Event Grid Build Notifier Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-826h-fxff-hpqf.md) `GHSA-826h-fxff-hpqf`, `CVE-2019-10421` · Maven `org.jenkins-ci.plugins:azure-event-grid-notifier`: affected `<=0.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Violation Comments to GitLab Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-3p8r-p4q5-mc44.md) `GHSA-3p8r-p4q5-mc44`, `CVE-2019-10416` · Maven `org.jenkins-ci.plugins:violation-comments-to-gitlab`: affected `<2.29`, fixed in `2.29` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Data Theorem Mobile Security: CI/CD Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-jjmv-6fv4-85vf.md) `GHSA-jjmv-6fv4-85vf`, `CVE-2019-10413` · Maven `com.datatheorem.mobileappsecurity.jenkins.plugin:datatheorem-mobile-app-security`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-9678-5f6f-wp3f.md) `GHSA-9678-5f6f-wp3f`, `CVE-2019-10398` · Maven `org.jenkins-ci.plugins:beaker-builder`: affected `<1.10`, fixed in `1.10` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins eggplant-plugin Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-xj63-95xc-jc4v.md) `GHSA-xj63-95xc-jc4v`, `CVE-2019-10385` · Maven `org.jenkins-ci.plugins:eggplant-plugin`: affected `<=2.2`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins TestLink Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-qcfr-65hf-f98x.md) `GHSA-qcfr-65hf-f98x`, `CVE-2019-10378` · Maven `org.jenkins-ci.plugins:testlink`: affected `<=3.16`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Google Cloud Messaging Notification Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-c3r5-vxj6-62mc.md) `GHSA-c3r5-vxj6-62mc`, `CVE-2019-10379` · Maven `org.jenkins-ci.plugins:gcm-notification`: affected `<=1.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Skytap Cloud CI Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-vp26-4hj6-jrvx.md) `GHSA-vp26-4hj6-jrvx`, `CVE-2019-10366` · Maven `org.jenkins-ci.plugins:skytap`: affected `<2.07`, fixed in `2.07` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Maven Release Plug-in Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-vwx8-qpqh-qwm9.md) `GHSA-vwx8-qpqh-qwm9`, `CVE-2019-10361` · Maven `org.jenkins-ci.plugins.m2release:m2release`: affected `<0.15.0`, fixed in `0.15.0` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Plaintext Storage of a Password in Jenkins Configuration as Code Plugin](https://agentprime.io/advisories/GHSA-ggmx-pq89-7mcr.md) `GHSA-ggmx-pq89-7mcr`, `CVE-2019-10345` · Maven `io.jenkins:configuration-as-code`: affected `<1.25`, fixed in `1.25` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, Information disclosure, CWE-256 - [Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format](https://agentprime.io/advisories/GHSA-j7gw-mwfg-vqf4.md) `GHSA-j7gw-mwfg-vqf4`, `CVE-2019-1010241` · Maven `org.jenkins-ci.plugins:credentials-binding`: affected `=1.17`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-257 - [Stored credentials unencrypted in Jenkins Mashup Portlets Plugin](https://agentprime.io/advisories/GHSA-9p5v-6p5f-f28h.md) `GHSA-9p5v-6p5f-f28h`, `CVE-2019-10347` · Maven `javagh.jenkins:mashup-portlets-plugin`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Azure AD Plugin stored the client secret unencrypted](https://agentprime.io/advisories/GHSA-jcwj-j574-8j2c.md) `GHSA-jcwj-j574-8j2c`, `CVE-2019-10318` · Maven `org.jenkins-ci.plugins:azure-ad`: affected `<0.3.4`, fixed in `0.3.4` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Twitter Plugin stores credentials in plain text](https://agentprime.io/advisories/GHSA-x2cx-h7w4-q6x7.md) `GHSA-x2cx-h7w4-q6x7`, `CVE-2019-10313` · Maven `org.jenkins-ci.plugins:twitter`: affected `<=0.7`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Aqua MicroScanner Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-gg8r-24qm-qfch.md) `GHSA-gg8r-24qm-qfch`, `CVE-2019-10316` · Maven `org.jenkins-ci.plugins:aqua-microscanner`: affected `<1.0.6`, fixed in `1.0.6` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text](https://agentprime.io/advisories/GHSA-rfc8-wrrf-wp3w.md) `GHSA-rfc8-wrrf-wp3w`, `CVE-2019-10303` · Maven `org.jenkins-ci.plugins:azure-publishersettings-credentials`: affected `<1.5`, fixed in `1.5` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Jenkins jira-ext Plugin stores credentials unencrypted](https://agentprime.io/advisories/GHSA-chm8-wp3h-f4m3.md) `GHSA-chm8-wp3h-f4m3`, `CVE-2019-10302` · Maven `org.jenkins-ci.plugins:jira-ext`: affected `<0.9`, fixed in `0.9` · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials](https://agentprime.io/advisories/CVE-2013-10002.md) `CVE-2013-10002` · CVE record: Telecommunication Software SAMwin Contact Center Suite · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Weak Password Requirements in polonel/trudesk](https://agentprime.io/advisories/CVE-2022-1775.md) `CVE-2022-1775` · CVE record: polonel polonel/trudesk · CVSS 8.4 High · Not analysed yet · Published 20 May 2022 · Tags: Hard-coded credentials - [Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise](https://agentprime.io/advisories/CVE-2022-29186.md) `CVE-2022-29186` · CVE record: rundeck rundeck · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 May 2022 · Tags: Hard-coded credentials - [Hard-coded credentials in Lenovo Personal Cloud Storage A1 and others](https://agentprime.io/advisories/CVE-2021-42850.md) `CVE-2021-42850` · CVE record: Lenovo Personal Cloud Storage A1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 18 May 2022 · Tags: Hard-coded credentials - [Hard-coded credentials in Lenovo Personal Cloud Storage A1 and others](https://agentprime.io/advisories/CVE-2021-42849.md) `CVE-2021-42849` · CVE record: Lenovo Personal Cloud Storage A1 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 18 May 2022 · Tags: Hard-coded credentials - [Insufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin](https://agentprime.io/advisories/GHSA-g74w-93cp-5p3p.md) `GHSA-g74w-93cp-5p3p`, `CVE-2022-30952` · Maven `io.jenkins.blueocean:blueocean-pipeline-scm-api`: affected `<1.25.4`, fixed in `1.25.4` · CVSS 5.3 Medium · Not analysed yet · Published 18 May 2022 · Tags: Hard-coded credentials - [Katello uses hard coded credential](https://agentprime.io/advisories/GHSA-5xv2-q475-rwrh.md) `GHSA-5xv2-q475-rwrh`, `CVE-2012-3503` · RubyGems `katello`: affected `<1.0.6 || >=1.1.0, <1.1.7`, fixed in `1.0.6`, `1.1.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2022 · Tags: Hard-coded credentials - [Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-644j-jcc4-crx7.md) `GHSA-644j-jcc4-crx7`, `CVE-2018-1000402` · Maven `com.amazonaws:codedeploy`: affected `<1.20`, fixed in `1.20` · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2022 · Tags: Hard-coded credentials - [Improper Access Control in Apache Shiro](https://agentprime.io/advisories/GHSA-p836-389h-j692.md) `GHSA-p836-389h-j692`, `CVE-2016-4437` · Maven `org.apache.shiro:shiro-core`: affected `<1.2.5`, fixed in `1.2.5` · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 14 May 2022 · Tags: Broken access control, Hard-coded credentials - [Use of Hard-coded Cryptographic Key in Apache Tomcat](https://agentprime.io/advisories/GHSA-6cr4-7c7p-p3xv.md) `GHSA-6cr4-7c7p-p3xv`, `CVE-2011-5064` · Maven `org.apache.tomcat:tomcat`: affected `>=5.5.0, <5.5.34 || >=6.0.0, <6.0.33 || >=7.0.0, <7.0.12`, fixed in `5.5.34`, `6.0.33`, `7.0.12` · No CVSS score · Not analysed yet · Published 14 May 2022 · Tags: Hard-coded credentials - [Account takeover in facturascripts](https://agentprime.io/advisories/GHSA-vjq3-x3f2-fvxq.md) `GHSA-vjq3-x3f2-fvxq`, `CVE-2022-1715`, `PKSA-byqn-jvrk-5b8k` · Packagist `facturascripts/facturascripts`: affected `<2022.08`, fixed in `2022.08` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 May 2022 · Tags: Hard-coded credentials, CWE-1125 - [Hard-coded cryptographic key in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2022-1701.md) `CVE-2022-1701` · CVE record: SonicWall SonicWall SMA1000 · No CVSS score · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-8486-h39x-cx2f.md) `GHSA-8486-h39x-cx2f`, `CVE-2018-1000610` · Maven `io.jenkins:configuration-as-code`: affected `<0.8-alpha`, fixed in `0.8-alpha` · CVSS 8.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password](https://agentprime.io/advisories/GHSA-5fq9-x9f4-x2r2.md) `GHSA-5fq9-x9f4-x2r2`, `CVE-2018-1000608` · Maven `org.jenkins-ci.plugins:zos-connector`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 3.3 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [AWS CodeDeploy Plugin stored AWS Secret Key in plain text](https://agentprime.io/advisories/GHSA-h66p-m766-33fv.md) `GHSA-h66p-m766-33fv`, `CVE-2018-1000403` · Maven `com.amazonaws:codedeploy`: affected `<1.20`, fixed in `1.20` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-5gwq-4275-q4qc.md) `GHSA-5gwq-4275-q4qc`, `CVE-2018-1000401` · Maven `com.amazonaws:aws-codepipeline`: affected `<0.37`, fixed in `0.37` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin](https://agentprime.io/advisories/GHSA-mwg7-69hf-vqh3.md) `GHSA-mwg7-69hf-vqh3`, `CVE-2018-1000404` · Maven `com.amazonaws:aws-codebuild`: affected `<0.27`, fixed in `0.27` · CVSS 7.8 High · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Weak Password Requirements in UnboundID LDAP SDK](https://agentprime.io/advisories/GHSA-qwq9-8rpf-8mp7.md) `GHSA-qwq9-8rpf-8mp7`, `CVE-2018-1000134` · Maven `com.unboundid:unboundid-ldapsdk`: affected `>=1.1.0, <4.0.5`, fixed in `4.0.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Jenkins Coverity Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-cghg-jcv6-4v5m.md) `GHSA-cghg-jcv6-4v5m`, `CVE-2018-1000104` · Maven `org.jenkins-ci.plugins:coverity`: affected `<1.11.0`, fixed in `1.11.0` · CVSS 2.7 Low · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials - [Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-38xm-xhvj-q2qf.md) `GHSA-38xm-xhvj-q2qf`, `CVE-2018-1000057` · Maven `org.jenkins-ci.plugins:credentials-binding`: affected `<1.15`, fixed in `1.15` · CVSS 4.3 Medium · Not analysed yet · Published 13 May 2022 · Tags: Hard-coded credentials Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .