UpHeron
All vulnerabilities

Servers and applications

CVE-2020-2164

Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

Severity
Medium 6.5
Published
25 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
JFrog ArtifactoryServers and applications · cpe:a:jfrog:artifactory
  • Every version up to 3.5.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2164
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2164