Jenkins Sensedia API Platform Tools Plugin Plaintext Token Storage Vulnerability

A vulnerability exists in Jenkins Sensedia API Platform Tools Plugin versions 1.0 and earlier, where the Sensedia API Manager integration token is stored unencrypted in a global configuration file on the Jenkins controller. This token can be accessed by users with permission to read the Jenkins controller file system.

Impact

The vulnerability allows for unauthorized access to the Sensedia API Manager integration token, which could be misused if the token grants access to sensitive API functionalities or data.