Jenkins Warrior Framework Plugin Password Storage Vulnerability

A vulnerability exists in the Jenkins Warrior Framework Plugin in versions through 1.2, where passwords are stored unencrypted in job config.xml files on the Jenkins controller. This exposure allows users with Item/Extended Read permission or access to the Jenkins controller file system to view these passwords.

Impact

The vulnerability allows for unauthorized access to passwords stored in plain text, which could lead to further exploitation depending on the sensitivity of the credentials.