CVE-2020-2095 | BDVDB-2026-129135 Detail

Jenkins projectJenkins Redgate SQL Change Automation Plugin

Description#

Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master where they could be viewed by users with Extended Read permission, or access to the master file system.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jenkins.io/security/advisory/2020-01-15/#SECURITY-1696

Exploit#

No public exploit known

History#

Version 12020-01-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.