GHSA-4fjc-fwj2-7xfg, CVE-2020-2149
maven/org.jenkins-ci.plugins/repository-connector
Cleartext Transmission of Sensitive Information
Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
All versions up to 1.2.6
Upgrade to version 2.0.0 or above.
2023-01-15
source |