CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2020-2151
Medium (5.3) in jenkins quality gates. EPSS 0.8% chance of exploitation in the next 30 days.
Jenkins Quality Gates Plugin 2.5 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:quality_gates
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-gvcj-72h4-8xm9 | Maven | org.jenkins-ci.plugins:quality-gates | <=2.5 | no fix published |