# Hard-coded credentials. Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text](https://agentprime.io/advisories/GHSA-9h79-5m2f-mqj2.md) `GHSA-9h79-5m2f-mqj2`, `CVE-2022-34213` · Maven `org.jenkins-ci.plugins:squashtm-publisher`: affected `<=1.0.0`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 Jun 2022 · Tags: Hard-coded credentials - [Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin](https://agentprime.io/advisories/GHSA-c8mf-mc3f-2wvc.md) `GHSA-c8mf-mc3f-2wvc`, `CVE-2022-34199` · Maven `com.convertigo.jenkins.plugins:convertigo-mobile-platform`: affected `<=1.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2022 · Tags: Hard-coded credentials, CWE-256 - [Insufficiently Protected Credentials via Insecure Temporary File in org.apache.nifi:nifi-single-user-utils](https://agentprime.io/advisories/GHSA-rvp4-r3g6-8hxq.md) `GHSA-rvp4-r3g6-8hxq`, `BIT-nifi-2022-26850`, `CVE-2022-26850` · Maven `org.apache.nifi:nifi-single-user-utils`: affected `<1.16`, fixed in `1.16` · CVSS 6.5 Medium · Not analysed yet · Published 20 Jun 2022 · Tags: Hard-coded credentials - [Rundeck's Key Storage converter plugin mechanism's encryption layer not working in 4.2.0, 4.2.1, 4.3.0](https://agentprime.io/advisories/GHSA-hprf-rrwq-jm5c.md) `GHSA-hprf-rrwq-jm5c`, `CVE-2022-31044` · Maven `org.rundeck:rundeck`: affected `>=4.2.0, <4.2.2 || >=4.3.0, <4.3.1`, fixed in `4.2.2`, `4.3.1` · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2022 · Tags: Hard-coded credentials, CWE-256 - [GE Voluson S8 Service Browser hard-coded credentials](https://agentprime.io/advisories/CVE-2020-36547.md) `CVE-2020-36547` · CVE record: GE Voluson S8 · CVSS 5.9 Medium · Not analysed yet · Published 17 Jun 2022 · Tags: Hard-coded credentials - [Insufficiently Protected Credentials in PowerJob](https://agentprime.io/advisories/GHSA-w4q4-jcm7-g4m6.md) `GHSA-w4q4-jcm7-g4m6`, `CVE-2020-28865` · Maven `com.github.kfcfans:powerjob`: affected `<3.3.3`, fixed in `3.3.3` · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2022 · Tags: Hard-coded credentials - [Weak Password Requirements in kromitgmbh/titra](https://agentprime.io/advisories/CVE-2022-2098.md) `CVE-2022-2098` · CVE record: kromitgmbh kromitgmbh/titra · CVSS 7.1 High · Not analysed yet · Published 16 Jun 2022 · Tags: Hard-coded credentials - [Hard-coded credentials in Siemens Teamcenter V12.4 and others](https://agentprime.io/advisories/CVE-2022-31619.md) `CVE-2022-31619` · CVE record: Siemens Teamcenter V12.4 and 4 more · No CVSS score · Not analysed yet · Published 14 Jun 2022 · Tags: Hard-coded credentials - [Hard-coded credentials in Siemens Spectrum Power 4 and others](https://agentprime.io/advisories/CVE-2022-26476.md) `CVE-2022-26476` · CVE record: Siemens Spectrum Power 4 and 2 more · No CVSS score · Not analysed yet · Published 14 Jun 2022 · Tags: Hard-coded credentials - [SICUNET Access Controller hard-coded password](https://agentprime.io/advisories/CVE-2017-20039.md) `CVE-2017-20039` · CVE record: SICUNET Access Controller · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2022 · Tags: Hard-coded credentials - [Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect](https://agentprime.io/advisories/GHSA-64qm-hrgp-pgr9.md) `GHSA-64qm-hrgp-pgr9`, `CVE-2022-31033` · RubyGems `mechanize`: affected `<2.8.5`, fixed in `2.8.5` · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2022 · Tags: Information disclosure, Hard-coded credentials - [D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php](https://agentprime.io/advisories/CVE-2022-29778.md) `CVE-2022-29778` · CVE record · CVSS 8.8 High · Not analysed yet · Published 3 Jun 2022 · Tags: Hard-coded credentials - [Hard-coded credentials in Schneider Electric Wiser Smart](https://agentprime.io/advisories/CVE-2022-30234.md) `CVE-2022-30234` · CVE record: Schneider Electric Wiser Smart · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2022 · Tags: Hard-coded credentials - [Weak password requirements in Dell PowerScale OneFS](https://agentprime.io/advisories/CVE-2022-29098.md) `CVE-2022-29098` · CVE record: Dell PowerScale OneFS · CVSS 8.1 High · Not analysed yet · Published 1 Jun 2022 · Tags: Hard-coded credentials - [Insufficiently protected credentials in https\://github.com/curl/curl](https://agentprime.io/advisories/CVE-2022-27776.md) `CVE-2022-27776` · CVE record: https\://github.com/curl/curl · No CVSS score · Not analysed yet · Published 1 Jun 2022 · Tags: Hard-coded credentials - [Insufficiently protected credentials in https\://github.com/curl/curl](https://agentprime.io/advisories/CVE-2022-27774.md) `CVE-2022-27774` · CVE record: https\://github.com/curl/curl · CVSS 5.7 Medium · Not analysed yet · Published 1 Jun 2022 · Tags: Hard-coded credentials - [KUKA KR C4 - Use of Hard-Coded Credentials](https://agentprime.io/advisories/CVE-2021-33014.md) `CVE-2021-33014` · CVE record: KUKA KR C4 and 1 more · CVSS 8.8 High · Not analysed yet · Published 26 May 2022 · Tags: Hard-coded credentials - [KUKA KR C4 - Use of Hard-Coded Credentials](https://agentprime.io/advisories/CVE-2021-33016.md) `CVE-2021-33016` · CVE record: KUKA KR C4 and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2022 · Tags: Hard-coded credentials - [Ansible Exposes Sensitive Information](https://agentprime.io/advisories/GHSA-5rrg-rr89-x9mv.md) `GHSA-5rrg-rr89-x9mv`, `CVE-2021-20228`, `PYSEC-2021-1` · PyPI `ansible`: affected `<2.8.19rc1 || >=2.9.0a1, <2.9.18rc1 || >=2.10.0a1, <2.10.6rc1`, fixed in `2.8.19rc1`, `2.9.18rc1`, `2.10.6rc1` · CVSS 7.5 High · Not analysed yet · Published 25 May 2022 · Tags: Information disclosure, Hard-coded credentials - [Jenkins Gem Publisher Plugin stores credentials as plaintext](https://agentprime.io/advisories/GHSA-6pqm-pp65-mc26.md) `GHSA-6pqm-pp65-mc26`, `CVE-2019-10426` · Maven `net.arangamani.jenkins:gem-publisher`: affected `<=1.0`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Jenkins GitLab Logo Plugin stores credentials unencrypted](https://agentprime.io/advisories/GHSA-22rj-q66g-2jg3.md) `GHSA-22rj-q66g-2jg3`, `CVE-2019-10429` · Maven `org.jenkins-ci.plugins:gitlab-logo`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Plaintext password storage in Jenkins InfluxDB Plugin](https://agentprime.io/advisories/GHSA-rv97-r8f7-8wmg.md) `GHSA-rv97-r8f7-8wmg`, `CVE-2019-10329` · Maven `org.jenkins-ci.plugins:influxdb`: affected `<1.22`, fixed in `1.22` · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Apache Superset allowed for database connections password leak for authenticated users](https://agentprime.io/advisories/GHSA-42q4-9xf9-f67x.md) `GHSA-42q4-9xf9-f67x`, `BIT-superset-2021-41972`, `CVE-2021-41972`, `PYSEC-2021-434` · PyPI `apache-superset`: affected `<1.3.2`, fixed in `1.3.2` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Password stored in plain text by Jenkins Nomad Plugin](https://agentprime.io/advisories/GHSA-5c2c-cvg6-ghjm.md) `GHSA-5c2c-cvg6-ghjm`, `CVE-2021-21681` · Maven `org.jenkins-ci.plugins:nomad`: affected `<0.7.5`, fixed in `0.7.5` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Liferay Portal and Liferay DXP May Reveal S3 Store's Proxy Password](https://agentprime.io/advisories/GHSA-xx2h-2hf5-v7vv.md) `GHSA-xx2h-2hf5-v7vv`, `CVE-2021-29043` · Maven `com.liferay.portal:release.dxp.bom` and 1 more: affected `<7.0.10.fp97 || >=7.1.0, <7.1.10.fp21 || >=7.2.0, <7.2.10.fp10 || >=7.3.0, <7.3.10.fp1`, fixed in `7.0.10.fp97`, `7.1.10.fp21`, `7.2.10.fp10`, `7.3.10.fp1` · CVSS 5.9 Medium · Not analysed yet · Published 24 May 2022 · Tags: Information disclosure, Hard-coded credentials - [Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin](https://agentprime.io/advisories/GHSA-79r5-rhrw-7pvh.md) `GHSA-79r5-rhrw-7pvh`, `CVE-2021-21634` · Maven `org.jvnet.hudson.plugins:jabber`: affected `<1.42`, fixed in `1.42` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [ThinkAdmin Admin Panel Access using Default Credentials](https://agentprime.io/advisories/GHSA-cxv7-6jgf-7gwf.md) `GHSA-cxv7-6jgf-7gwf`, `CVE-2020-35296`, `PKSA-c2q3-bhvj-nwpw` · Packagist `zoujingli/thinkadmin`: affected `=6.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin](https://agentprime.io/advisories/GHSA-qvjr-x8fw-hghv.md) `GHSA-qvjr-x8fw-hghv`, `CVE-2021-21612` · Maven `de.tracetronic.jenkins.plugins:ecutest`: affected `<2.24`, fixed in `2.24` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin](https://agentprime.io/advisories/GHSA-8v72-qr3h-c6rv.md) `GHSA-8v72-qr3h-c6rv`, `CVE-2021-21614` · Maven `org.jenkins-ci.plugins:bumblebee`: affected `<4.1.6`, fixed in `4.1.6` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Password stored in plain text by Jenkins VMware Lab Manager Slaves Plugin](https://agentprime.io/advisories/GHSA-cg4h-cfjp-h3x2.md) `GHSA-cg4h-cfjp-h3x2`, `CVE-2020-2319` · Maven `org.jenkins-ci.plugins:labmanager`: affected `<=0.2.8`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin](https://agentprime.io/advisories/GHSA-485q-v457-3p58.md) `GHSA-485q-v457-3p58`, `CVE-2020-2318` · Maven `org.jenkins-ci.plugins:mailcommander`: affected `<=1.0.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password written to the build log by Jenkins SQLPlus Script Runner Plugin](https://agentprime.io/advisories/GHSA-rwh3-5g7v-3c5m.md) `GHSA-rwh3-5g7v-3c5m`, `CVE-2020-2312` · Maven `org.jenkins-ci.plugins:sqlplus-script-runner`: affected `<2.0.13`, fixed in `2.0.13` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Password stored in plain text by Jenkins AppSpider Plugin](https://agentprime.io/advisories/GHSA-rm7r-xv53-xwc3.md) `GHSA-rm7r-xv53-xwc3`, `CVE-2020-2314` · Maven `com.rapid7:jenkinsci-appspider-plugin`: affected `<1.0.13`, fixed in `1.0.13` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Access token stored in plain text by Jenkins SMS Notification Plugin](https://agentprime.io/advisories/GHSA-vwfv-qpw8-83c7.md) `GHSA-vwfv-qpw8-83c7`, `CVE-2020-2297` · Maven `com.hoiio.jenkins:sms`: affected `<=1.2`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Password stored in plain text by Jenkins couchdb-statistics Plugin](https://agentprime.io/advisories/GHSA-jrjr-7rf4-3wqh.md) `GHSA-jrjr-7rf4-3wqh`, `CVE-2020-2291` · Maven `org.jenkins-ci.plugins:couchdb-statistics`: affected `<0.4`, fixed in `0.4` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe Connection](https://agentprime.io/advisories/GHSA-773f-f929-qgjj.md) `GHSA-773f-f929-qgjj`, `CVE-2020-15841` · Maven `com.liferay.portal:release.dxp.bom` and 1 more: affected `>=7.0.0, <7.0.10.fp89 || >=7.1.0, <7.1.10.fp17 || >=7.2.0, <7.2.10.fp4`, fixed in `7.0.10.fp89`, `7.1.10.fp17`, `7.2.10.fp4` · CVSS 8.3 High · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Password stored in plain text by Jenkins HP ALM Quality Center Plugin](https://agentprime.io/advisories/GHSA-fc3j-cfqv-pfrm.md) `GHSA-fc3j-cfqv-pfrm`, `CVE-2020-2218` · Maven `org.jenkins-ci.plugins:hp-quality-center`: affected `<=1.6`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Credentials stored in plain text by Jenkins White Source Plugin](https://agentprime.io/advisories/GHSA-v8v2-fhgv-3vq2.md) `GHSA-v8v2-fhgv-3vq2`, `CVE-2020-2213` · Maven `org.jenkins-ci.plugins:whitesource`: affected `<20.8.1`, fixed in `20.8.1` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password stored in plain text by Jenkins TestComplete support Plugin](https://agentprime.io/advisories/GHSA-r32r-f6wr-cc3w.md) `GHSA-r32r-f6wr-cc3w`, `CVE-2020-2209` · Maven `org.jenkins-ci.plugins:TestComplete`: affected `<2.5.2`, fixed in `2.5.2` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Secret stored in plain text by Jenkins Slack Upload Plugin](https://agentprime.io/advisories/GHSA-656g-hf8v-x2rw.md) `GHSA-656g-hf8v-x2rw`, `CVE-2020-2208` · Maven `org.jenkins-ci.plugins:slack-uploader`: affected `<=1.7`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Secret stored in plain text by Jenkins GitHub Coverage Reporter Plugin](https://agentprime.io/advisories/GHSA-5r5f-hcwf-r9jh.md) `GHSA-5r5f-hcwf-r9jh`, `CVE-2020-2212` · Maven `io.jenkins.plugins:github-coverage-reporter`: affected `<=1.10`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [ActiveMQ Artemis has Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-q9g8-9hpp-xc82.md) `GHSA-q9g8-9hpp-xc82`, `CVE-2020-10727` · Maven `org.apache.activemq:artemis-commons`: affected `>=2.7.0, <2.13.0`, fixed in `2.13.0` · CVSS 5.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Information disclosure, Hard-coded credentials - [Openstack cinder Improper handling of ScaleIO backend credentials](https://agentprime.io/advisories/GHSA-v3m2-pg96-w33m.md) `GHSA-v3m2-pg96-w33m`, `CVE-2020-10755`, `PYSEC-2020-228`, `PYSEC-2026-891` · PyPI `cinder` and 1 more: affected `>=14.0.0, <14.1.0 || >=15.0.0, <15.2.0 || >=16.0.0, <16.1.0`, fixed in `14.1.0`, `15.2.0`, `16.1.0` · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Missing permission check in Jenkins Project Inheritance Plugin](https://agentprime.io/advisories/GHSA-w53q-r5cw-6vjh.md) `GHSA-w53q-r5cw-6vjh`, `CVE-2020-2198` · Maven `hudson.plugins:project-inheritance`: affected `<=21.04.03`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Improper masking of some secrets in Jenkins Credentials Binding Plugin](https://agentprime.io/advisories/GHSA-7ff8-qfwx-8gx5.md) `GHSA-7ff8-qfwx-8gx5`, `CVE-2020-2182` · Maven `org.jenkins-ci.plugins:credentials-binding`: affected `<1.23`, fixed in `1.23` · CVSS 3.1 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps](https://agentprime.io/advisories/GHSA-43j2-r4v3-m8jp.md) `GHSA-43j2-r4v3-m8jp`, `CVE-2020-2181` · Maven `org.jenkins-ci.plugins:credentials-binding`: affected `<1.23`, fixed in `1.23` · CVSS 5.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials - [Passwords transmitted in plain text by Jenkins Artifactory Plugin](https://agentprime.io/advisories/GHSA-xqf6-5grh-6223.md) `GHSA-xqf6-5grh-6223`, `BIT-artifactory-2020-2165`, `CVE-2020-2165` · Maven `org.jenkins-ci.plugins:artifactory`: affected `<3.6.1`, fixed in `3.6.1` · CVSS 3.1 Low · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, Hard-coded credentials - [Passwords stored in plain text by Jenkins Artifactory Plugin](https://agentprime.io/advisories/GHSA-4q47-ph87-fq4f.md) `GHSA-4q47-ph87-fq4f`, `BIT-artifactory-2020-2164`, `CVE-2020-2164` · Maven `org.jenkins-ci.plugins:artifactory`: affected `<3.6.0`, fixed in `3.6.0` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Information disclosure, Hard-coded credentials - [Credentials stored in plain text by Zephyr Enterprise Test Management Plugin](https://agentprime.io/advisories/GHSA-xv58-gp43-6m76.md) `GHSA-xv58-gp43-6m76`, `CVE-2020-2145` · Maven `org.jenkins-ci.plugins:zephyr-enterprise-test-management`: affected `<1.10`, fixed in `1.10` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Passwords stored in plain text by Harvest SCM Plugin](https://agentprime.io/advisories/GHSA-qj7p-9hgf-x8j7.md) `GHSA-qj7p-9hgf-x8j7`, `CVE-2020-2131` · Maven `org.jenkins-ci.plugins:harvest`: affected `<=0.5.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Passwords stored in plain text by Harvest SCM Plugin](https://agentprime.io/advisories/GHSA-jmp9-f42q-4g85.md) `GHSA-jmp9-f42q-4g85`, `CVE-2020-2130` · Maven `org.jenkins-ci.plugins:harvest`: affected `<=0.5.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password stored in plain text by Applatix Plugin](https://agentprime.io/advisories/GHSA-54m9-h7qp-fwvg.md) `GHSA-54m9-h7qp-fwvg`, `CVE-2020-2133` · Maven `com.applatix.jenkins:applatix`: affected `<=1.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Plaintext Storage of a Password in Jenkins Eagle Tester Plugin](https://agentprime.io/advisories/GHSA-vj6f-q4w6-qx9p.md) `GHSA-vj6f-q4w6-qx9p`, `CVE-2020-2129` · Maven `com.mobileenerlytics.eagle.tester:eagle-tester`: affected `<=1.0.9`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password stored in plain text by Dynamic Extended Choice Parameter Plugin](https://agentprime.io/advisories/GHSA-h6pp-v4j6-w76c.md) `GHSA-h6pp-v4j6-w76c`, `CVE-2020-2124` · Maven `com.moded.extendedchoiceparameter:dynamic_extended_choice_parameter`: affected `<=1.0.1`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password stored in plain text by Parasoft Environment Manager Plugin](https://agentprime.io/advisories/GHSA-gmg2-3w6v-945p.md) `GHSA-gmg2-3w6v-945p`, `CVE-2020-2132` · Maven `com.parasoft:environment-manager`: affected `<2.15`, fixed in `2.15` · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Token stored in plain text by DigitalOcean Plugin](https://agentprime.io/advisories/GHSA-8g6v-g8qc-5w7j.md) `GHSA-8g6v-g8qc-5w7j`, `CVE-2020-2126` · Maven `com.dubture.jenkins:digitalocean-plugin`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Password stored in plain text by ECX Copy Data Management Plugin](https://agentprime.io/advisories/GHSA-6793-gmp9-2535.md) `GHSA-6793-gmp9-2535`, `CVE-2020-2128` · Maven `com.catalogic.ecxjenkins:catalogic-ecx`: affected `<=1.9`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Credentials stored in plain text by debian-package-builder Plugin](https://agentprime.io/advisories/GHSA-64jr-ggw8-h9jc.md) `GHSA-64jr-ggw8-h9jc`, `CVE-2020-2125` · Maven `ru.yandex.jenkins.plugins.debuilder:debian-package-builder`: affected `<=1.6.11`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Credential stored in plain text by BMC Release Package and Deployment Plugin](https://agentprime.io/advisories/GHSA-2j3r-x6xc-qqqj.md) `GHSA-2j3r-x6xc-qqqj`, `CVE-2020-2127` · Maven `RPD:bmc-rpd`: affected `<=1.1`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 - [Client secret transmitted in plain text by Azure AD Plugin](https://agentprime.io/advisories/GHSA-vvg2-hg3c-mqj3.md) `GHSA-vvg2-hg3c-mqj3`, `CVE-2020-2119` · Maven `org.jenkins-ci.plugins:azure-ad`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 3.1 Low · Not analysed yet · Published 24 May 2022 · Tags: Hard-coded credentials, CWE-256 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .