hudson.plugins.sctmexecutor/SCTMExecutor vulnerabilities

Latest hudson.plugins.sctmexecutor/SCTMExecutor CVEs

Newest publication first

1. CVE-2019-16568 Jenkins SCTMExecutor Plugin stores credentials in plain text

   Published 2019-12-17

   Medium·CVSS 5.3 EPSS 0.58%

   Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.