All vulnerabilities

Servers and applications

CVE-2020-2251

Jenkins SoapUI Pro Functional Testing Plugin 1.5 and earlier transmits project passwords in its configuration in plain text as part of job configuration forms, potentially resulting in their exposure.

Severity
Medium 4.3
Published
1 Sept 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.236
Sources
NVD

Affected software

SoftwareAffected versions
JenkinsServers and applications · cpe:a:jenkins:jenkins
  • Every version before 2.236

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2251
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2251