Jenkins Sonar Gerrit Plugin stores credentials unencrypted
Date: 2022-05
Affected: maven/org.jenkins-ci.plugins:sonar-gerrit
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2019-10459
CVE-2019-10460
CVE-2019-10466
CVE-2019-10467
CWE: CWE-522
CWE-611
CVSS: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.


Mitigations:

Architectural layers (MAESTRO):