Product

sonarsource jenkins plugin vulnerabilities

1 published CVE affecting sonarsource jenkins plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest sonarsource jenkins plugin CVEs

Newest publication first

CVE-2013-5676 Jenkins SonarQube Plugin Stores Passwords in Cleartext
Published 2013-12-13

MediumCVSS 4.0 EPSS 5.0%

The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

sonarsource jenkins plugin vulnerabilities

Latest sonarsource jenkins plugin CVEs

CVE-2013-5676 Jenkins SonarQube Plugin Stores Passwords in Cleartext