https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T06:32:40.058139+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-02702 bdu:2020-02702 2026-10-15T06:32:40.146080+00:00 bdu:2020-02702 https://cve.radiocsirt.org/vuln/cnvd-2020-20403 cnvd-2020-20403 2026-10-15T06:32:40.146118+00:00 cnvd-2020-20403 https://cve.radiocsirt.org/vuln/euvd-2026-35809 EUVD-2026-35809 2026-10-15T06:32:40.146134+00:00 EUVD-2026-35809 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2164 fkie_cve-2020-2164 2026-10-15T06:32:40.146145+00:00

Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system.

 https://cve.radiocsirt.org/vuln/ghsa-4q47-ph87-fq4f GHSA-4q47-ph87-fq4f — Passwords stored in plain text by Jenkins Artifactory Plugin 2026-10-15T06:32:40.146174+00:00

Affected: Maven: org.jenkins-ci.plugins:artifactory

Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password in plain text in the global configuration file `org.jfrog.hudson.ArtifactoryBuilder.xml`. This password can be viewed by users with access to the Jenkins controller file system.

Artifactory Plugin 3.6.0 now stores the Artifactory server password encrypted. This change is effective once the global configuration is saved the next time.

 https://cve.radiocsirt.org/vuln/gsd-2020-2164 gsd-2020-2164 2026-10-15T06:32:40.146200+00:00 gsd-2020-2164