This security bulletin contains one low risk vulnerability.
Exploit availability: NoDescription
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to software uses insecure communication channel to transmit sensitive information. A remote authenticated attacker with ability to intercept network traffic can gain access to sensitive data.
Note: The affected plugin stores credentials in job "config.xml" files as part of its configuration.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.Vulnerable software versions
DeployHub: 7.5.0 - 8.0.14CPE2.3
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?