Volerion logoVolerion
Volerion logoVolerion

Jenkins Monitor-Remote-Job Plugin Password Storage Vulnerability

Vulnerability

A vulnerability exists in the Jenkins monitor-remote-job Plugin version 1.0, which stores passwords in plaintext within job config.xml files on the Jenkins controller. This unencrypted storage allows users with Extended Read permission or access to the Jenkins controller file system to view these passwords.

Impact

The vulnerability allows unauthorized users to access sensitive passwords, potentially leading to unauthorized actions or access within Jenkins or connected systems.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
2.5
exploitability
4.9
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.