This security bulletin contains one low risk vulnerability.
Exploit availability: NoDescription
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote attacker with ability to intercept network traffic can gain access to sensitive data.
Note: The affected plugin stores credentials in its global configuration file "org.jenkinsci.plugins.openshift.DeployApplication.xml" on the Jenkins master as part of its configuration
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.Vulnerable software versions
OpenShift Deployer: 1.0.1 - 1.2.0CPE2.3
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?