← Back

Jenkins Plugin

jenkins_plugin

Vendor: Sonarsource • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-5676
1Sonarsource
1Jenkins Plugin
Apr 29, 2026
Dec 13, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from jenkins/configure.