Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-5676
4
MEDIUMCVSS v2
Published
December 13, 2013
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.
GitHub