Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Artifactory Insufficiently Protected Credentials Vulnerability - CVE-2020-2164 - Vulnerability Database
Artifactory

Artifactory Insufficiently Protected Credentials Vulnerability - CVE-2020-2164

Medium
Reference: CVE-2020-2164
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-2164
Title: Artifactory Insufficiently Protected Credentials Vulnerability
Overview:

Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.